diff --git a/kiali-operator/templates/clusterrole.yaml b/kiali-operator/templates/clusterrole.yaml index 23bfb28..fc7931e 100644 --- a/kiali-operator/templates/clusterrole.yaml +++ b/kiali-operator/templates/clusterrole.yaml @@ -312,4 +312,11 @@ rules: - tokenreviews verbs: - create +- apiGroups: ["admissionregistration.k8s.io"] + resources: + - mutatingwebhookconfigurations + verbs: + - get + - list + - watch ... diff --git a/kiali-server/templates/role-viewer.yaml b/kiali-server/templates/role-viewer.yaml index 0811b20..cbe6d0d 100644 --- a/kiali-server/templates/role-viewer.yaml +++ b/kiali-server/templates/role-viewer.yaml @@ -92,5 +92,12 @@ rules: - {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }} verbs: - get +- apiGroups: ["admissionregistration.k8s.io"] + resources: + - mutatingwebhookconfigurations + verbs: + - get + - list + - watch ... {{- end -}} diff --git a/kiali-server/templates/role.yaml b/kiali-server/templates/role.yaml index de23cc5..74c574d 100644 --- a/kiali-server/templates/role.yaml +++ b/kiali-server/templates/role.yaml @@ -99,5 +99,12 @@ rules: - {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }} verbs: - get +- apiGroups: ["admissionregistration.k8s.io"] + resources: + - mutatingwebhookconfigurations + verbs: + - get + - list + - watch ... {{- end -}}