Add tokenreviews permissions

gravitational · Oct 30, 2024 · d29ed6a · d29ed6a
1 parent 4107d50
commit d29ed6a
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/charts/eks-pod-identity-agent/templates/serviceaccount.yaml b/charts/eks-pod-identity-agent/templates/serviceaccount.yaml
@@ -20,6 +20,11 @@ rules:
   resources: ["serviceaccounts"]
   verbs: {{ .Values.irsa.cluster_role.permissions.serviceaccounts.verbs }}
 {{- end }}
+{{- if .Values.irsa.cluster_role.permissions.tokenreviews.verbs }}
+- apiGroups: [""]
+  resources: ["tokenreviews"]
+  verbs: {{ .Values.irsa.cluster_role.permissions.tokenreviews.verbs }}
+{{- end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/charts/eks-pod-identity-agent/values.yaml b/charts/eks-pod-identity-agent/values.yaml
@@ -107,3 +107,5 @@ irsa:
     permissions:
       serviceaccounts:
         verbs: ["get"]
+      tokenreviews:
+        verbs: ["create"]