Permit configmap list/watch for delegated authentication (#7)

xref: kubernetes/kubernetes#85004 Signed-off-by: Tamal Saha <tamal@appscode.com>
kubeshield · May 31, 2020 · 3b270c4 · 3b270c4
1 parent 90c5a8f
commit 3b270c4
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/charts/identity-server/templates/cluster-role.yaml b/charts/identity-server/templates/cluster-role.yaml
@@ -20,3 +20,8 @@ rules:
   resources:
   - events
   verbs: ["create"]
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs: ["get", "list", "watch"]