From 97aee736837371ce3b7ee249834018e2e222f6a1 Mon Sep 17 00:00:00 2001
From: Clarissa Borges <cborges@thoughtbot.com>
Date: Wed, 24 Jul 2024 11:01:24 -0300
Subject: [PATCH] Allow deploy role to interact with customresourcedefinitions

---
 aws/deploy-role-bindings/main.tf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/aws/deploy-role-bindings/main.tf b/aws/deploy-role-bindings/main.tf
index 8855c71d..32942308 100644
--- a/aws/deploy-role-bindings/main.tf
+++ b/aws/deploy-role-bindings/main.tf
@@ -61,4 +61,10 @@ resource "kubernetes_role" "deploy_crd" {
     resources  = ["prometheusservicelevels"]
     verbs      = ["*"]
   }
+
+  rule {
+    api_groups = ["apiextensions.k8s.io"]
+    resources  = ["customresourcedefinitions"]
+    verbs      = ["*"]
+  }
 }