From 613858aa6d7019e7cd2ed413054efa4285c3108d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Simon=20R=C3=BCegg?= Date: Thu, 24 Jan 2019 08:38:29 +0100 Subject: [PATCH] Add RBAC rules for finalizers MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit For the cert-manager to be able to set ownerReferences, the RBAC rules for finalizers need to be in place. Fixes #1257 Signed-off-by: Simon Rüegg --- deploy/charts/cert-manager/templates/rbac.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy/charts/cert-manager/templates/rbac.yaml b/deploy/charts/cert-manager/templates/rbac.yaml index 4d3532073..cf4cb0a5d 100644 --- a/deploy/charts/cert-manager/templates/rbac.yaml +++ b/deploy/charts/cert-manager/templates/rbac.yaml @@ -10,7 +10,7 @@ metadata: heritage: {{ .Release.Service }} rules: - apiGroups: ["certmanager.k8s.io"] - resources: ["certificates", "issuers", "clusterissuers", "orders", "challenges"] + resources: ["certificates", "certificates/finalizers", "issuers", "clusterissuers", "orders", "orders/finalizers", "challenges"] verbs: ["*"] - apiGroups: [""] resources: ["configmaps", "secrets", "events", "services", "pods"]