Allow deploy role to interact with customresourcedefinitions

thoughtbot · Jul 24, 2024 · 97aee73 · 97aee73
1 parent 8e29883
commit 97aee73
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/aws/deploy-role-bindings/main.tf b/aws/deploy-role-bindings/main.tf
@@ -61,4 +61,10 @@ resource "kubernetes_role" "deploy_crd" {
     resources  = ["prometheusservicelevels"]
     verbs      = ["*"]
   }
+
+  rule {
+    api_groups = ["apiextensions.k8s.io"]
+    resources  = ["customresourcedefinitions"]
+    verbs      = ["*"]
+  }
 }