feat(rbac): allow OrgAdmins to list & watch secrets in their namespace (

#505)
cloudoperators · Aug 29, 2024 · 9b9c8d8 · 9b9c8d8
1 parent 85740cc
commit 9b9c8d8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/rbac/role.go b/pkg/rbac/role.go
@@ -22,7 +22,7 @@ func OrganizationAdminPolicyRules() []rbacv1.PolicyRule {
 		// Grant permissions for secrets referenced by other resources, e.g. Plugins for storing sensitive values.
 		// Retrieving these secrets is not permitted to the user.
 		{
-			Verbs:     []string{"get", "create", "update", "patch"},
+			Verbs:     []string{"get", "list", "watch", "create", "update", "patch"},
 			APIGroups: []string{corev1.GroupName},
 			Resources: []string{"secrets"},
 		},