|
|
@@ -138,6 +138,19 @@ rules:
|
|
|
- "get"
|
|
|
- "watch"
|
|
|
- "list"
|
|
|
+ - apiGroups:
|
|
|
+ - "generators.external-secrets.io"
|
|
|
+ resources:
|
|
|
+ - "acraccesstokens"
|
|
|
+ - "ecrauthorizationtokens"
|
|
|
+ - "fakes"
|
|
|
+ - "gcraccesstokens"
|
|
|
+ - "passwords"
|
|
|
+ - "vaultdynamicsecrets"
|
|
|
+ verbs:
|
|
|
+ - "get"
|
|
|
+ - "watch"
|
|
|
+ - "list"
|
|
|
---
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
{{- if and .Values.scopedNamespace .Values.scopedRBAC }}
|
|
|
@@ -168,6 +181,21 @@ rules:
|
|
|
- "deletecollection"
|
|
|
- "patch"
|
|
|
- "update"
|
|
|
+ - apiGroups:
|
|
|
+ - "generators.external-secrets.io"
|
|
|
+ resources:
|
|
|
+ - "acraccesstokens"
|
|
|
+ - "ecrauthorizationtokens"
|
|
|
+ - "fakes"
|
|
|
+ - "gcraccesstokens"
|
|
|
+ - "passwords"
|
|
|
+ - "vaultdynamicsecrets"
|
|
|
+ verbs:
|
|
|
+ - "create"
|
|
|
+ - "delete"
|
|
|
+ - "deletecollection"
|
|
|
+ - "patch"
|
|
|
+ - "update"
|
|
|
---
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
{{- if and .Values.scopedNamespace .Values.scopedRBAC }}
|