Added permissions to allow kyverno to create secrets

2025-03-01 01:25:34 +01:00 · 2025-03-01 01:25:34 +01:00 · fff27a4b1b
commit fff27a4b1b
parent 2d0ded00eb
1 changed files with 29 additions and 0 deletions
--- a/infra/kyverno/values.yaml
+++ b/infra/kyverno/values.yaml
@ -9,12 +9,41 @@ admissionController:
            - "nodes"
          verbs:
            - get
+        - apiGroups:
+            - ""
+          resources:
+            - "secret"
+          verbs:
+            - get
+            - create
 backgroundController:
  replicas: 2
+  rbac:
+    clusterRole:
+      extraResources:
+        - apiGroups:
+            - ""
+          resources:
+            - "secrets"
+          verbs:
+            - get
+            - update
 cleanupController:
  replicas: 2
 reportsController:
  replicas: 2
+  rbac:
+    clusterRole:
+      extraResources:
+        - apiGroups:
+            - ""
+          resources:
+            - "secrets"
+            - "pods/binding"
+          verbs:
+            - get
+            - list
+            - watch

 config:
  webhooks: