From 1c16388eb8127a502ee11baa36a9bf32d8bc68cb Mon Sep 17 00:00:00 2001
From: Tamal Saha <tamal@appscode.com>
Date: Sun, 31 May 2020 12:24:54 -0700
Subject: [PATCH] Permit configmap list/watch for delegated authentication
 xref: https://github.com/kubernetes/kubernetes/pull/85004

Signed-off-by: Tamal Saha <tamal@appscode.com>
---
 charts/kubepack-operator/templates/cluster-role.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/charts/kubepack-operator/templates/cluster-role.yaml b/charts/kubepack-operator/templates/cluster-role.yaml
index aab5a905..c1609423 100644
--- a/charts/kubepack-operator/templates/cluster-role.yaml
+++ b/charts/kubepack-operator/templates/cluster-role.yaml
@@ -35,11 +35,15 @@ rules:
 - apiGroups:
   - ""
   resources:
-  - configmaps
   - secrets
   - services
   - serviceaccounts
   verbs: ["create", "get", "patch"]
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs: ["create", "patch", "get", "list", "watch"]
 - apiGroups:
   - ""
   resources: