fix(helm): add ClusterOriginIssuer to ClusterRole

Fixes: #130
cloudflare · Jul 9, 2024 · 099f3d1 · 099f3d1
1 parent bf9a61c
commit 099f3d1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/deploy/charts/origin-ca-issuer/Chart.yaml b/deploy/charts/origin-ca-issuer/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 type: application
 name: origin-ca-issuer
-version: 0.5.5
+version: 0.5.6
 appVersion: 0.9.0
 description: A Helm chart for origin-ca-issuer
 home: https://github.com/cloudflare/origin-ca-issuer

diff --git a/deploy/charts/origin-ca-issuer/templates/issuer-clusterrole.yaml b/deploy/charts/origin-ca-issuer/templates/issuer-clusterrole.yaml
@@ -24,10 +24,10 @@ rules:
     resources: ["certificaterequests/status"]
     verbs: ["get", "patch", "update"]
   - apiGroups: ["cert-manager.k8s.cloudflare.com"]
-    resources: ["originissuers"]
+    resources: ["originissuers", "clusteroriginissuers"]
     verbs: ["create", "get", "list", "watch"]
   - apiGroups: ["cert-manager.k8s.cloudflare.com"]
-    resources: ["originissuers/status"]
+    resources: ["originissuers/status", "clusteroriginissuers/status"]
     verbs: ["get", "patch", "update"]
 ---
 # permissions to approve all cert-manager.k8s.cloudflare.com requests