add admissionregistration group to work execution clusterrole (#401)

Signed-off-by: Zhiwei Yin <zyin@redhat.com>
open-cluster-management-io · Apr 8, 2024 · 3efb7d3 · 3efb7d3
1 parent bcbe4d2
commit 3efb7d3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrole-execution.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrole-execution.yaml
@@ -37,3 +37,6 @@ rules:
 - apiGroups: ["scheduling.k8s.io"]
   resources: ["priorityclasses"]
   verbs: ["get", "list", "watch", "create", "patch", "update", "delete"]
+- apiGroups: ["admissionregistration.k8s.io"]
+  resources: [ "mutatingwebhookconfigurations", "validatingwebhookconfigurations" ]
+  verbs: [ "get", "list", "watch", "create", "update", "patch" ]