Add RBAC rules for finalizers

For the cert-manager to be able to set ownerReferences, the RBAC rules
for finalizers need to be in place.

Fixes #1257

Signed-off-by: Simon Rüegg <simon.ruegg@vshn.ch>
This commit is contained in:
Simon Rüegg 2019-01-24 08:38:29 +01:00 committed by Simon Rüegg
parent 21f6604a08
commit 613858aa6d
No known key found for this signature in database
GPG Key ID: FFE2AA177FBD7E17

View File

@ -10,7 +10,7 @@ metadata:
heritage: {{ .Release.Service }}
rules:
- apiGroups: ["certmanager.k8s.io"]
resources: ["certificates", "issuers", "clusterissuers", "orders", "challenges"]
resources: ["certificates", "certificates/finalizers", "issuers", "clusterissuers", "orders", "orders/finalizers", "challenges"]
verbs: ["*"]
- apiGroups: [""]
resources: ["configmaps", "secrets", "events", "services", "pods"]