add rbac-permissions to check for news namespaces and crds

telekom-mms · Aug 11, 2023 · 18b48f7 · 18b48f7
1 parent 9df3606
commit 18b48f7
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/deploy/rbac.yaml b/deploy/rbac.yaml
@@ -12,7 +12,15 @@ metadata:
 rules:
   - apiGroups: [aquasecurity.github.io]
     resources: [vulnerabilityreports]
-    verbs: [list, watch, patch]
+    verbs: [list, watch, patch, get]
+
+  # Framework: runtime observation of namespaces & CRDs (addition/deletion).
+  - apiGroups: [apiextensions.k8s.io]
+    resources: [customresourcedefinitions]
+    verbs: [list, watch]
+  - apiGroups: [""]
+    resources: [namespaces]
+    verbs: [list, watch]
 
   - apiGroups: [""]
     resources: [events]