Add missing RBAC permissions needed by webhook (#217)

knative · Jun 28, 2018 · a8406e5 · a8406e5
1 parent 2004c5c
commit a8406e5
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/config/200-clusterrole.yaml b/config/200-clusterrole.yaml
@@ -4,7 +4,10 @@ metadata:
   name: knative-build-admin
 rules:
   - apiGroups: [""]
-    resources: ["pods", "namespaces", "secrets", "events", "serviceaccounts"]
+    resources: ["pods", "namespaces", "secrets", "events", "serviceaccounts", "configmaps"]
+    verbs: ["get", "list", "create", "update", "delete", "patch", "watch"]
+  - apiGroups: ["extensions"]
+    resources: ["deployments"]
     verbs: ["get", "list", "create", "update", "delete", "patch", "watch"]
   - apiGroups: ["admissionregistration.k8s.io"]
     resources: ["mutatingwebhookconfigurations"]