Merge pull request #49 from DataONEorg/feature-48-readonly-rbac

Allow read-only access ('kubectl get') on rbac roles and rolebindings
DataONEorg · Aug 21, 2024 · 421f9d8 · 421f9d8
2 parents b9e34a7 + 996df67
commit 421f9d8
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/authorization/application-context.yaml b/authorization/application-context.yaml
@@ -25,6 +25,10 @@ rules:
   - jobs
   - cronjobs
   verbs: ["*"]
+  ## Allow read-only access ('kubectl get') on rbac roles and rolebindings:
+- apiGroups: ["rbac.authorization.k8s.io"]
+  resources: ["roles", "rolebindings"]
+  verbs: ["get"]
 
 ---
 kind: RoleBinding