add subjectaccessreviews permission for placement (#208)

Signed-off-by: haoqing0110 <[email protected]>
open-cluster-management-io · Jul 4, 2023 · fe550eb · fe550eb
1 parent 40bc557
commit fe550eb
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/manifests/cluster-manager/hub/cluster-manager-placement-clusterrole.yaml b/manifests/cluster-manager/hub/cluster-manager-placement-clusterrole.yaml
@@ -10,6 +10,10 @@ rules:
 - apiGroups: ["apps"]
   resources: ["replicasets"]
   verbs: ["get"] 
+# Allow create subjectaccessreviews to access debug path
+- apiGroups: ["authorization.k8s.io"]
+  resources: ["subjectaccessreviews"]
+  verbs: ["create"]
 # Allow controller to create/patch/update events
 - apiGroups: ["", "events.k8s.io"]
   resources: ["events"]
@@ -42,3 +46,4 @@ rules:
 - apiGroups: ["config.openshift.io"]
   resources: ["infrastructures"]
   verbs: ["get"]
+