Grant kiali role list permissions for mutating webhooks

This is necessary to read tags in the cluster.
kiali · Sep 9, 2024 · be0885d · be0885d
1 parent 4de308c
commit be0885d
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 0 deletions.
diff --git a/kiali-operator/templates/clusterrole.yaml b/kiali-operator/templates/clusterrole.yaml
@@ -312,4 +312,11 @@ rules:
   - tokenreviews
   verbs:
   - create
+- apiGroups: ["admissionregistration.k8s.io"]
+  resources:
+  - mutatingwebhookconfigurations
+  verbs:
+  - get
+  - list
+  - watch
 ...
diff --git a/kiali-server/templates/role-viewer.yaml b/kiali-server/templates/role-viewer.yaml
@@ -92,5 +92,12 @@ rules:
   - {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }}
   verbs:
   - get
+- apiGroups: ["admissionregistration.k8s.io"]
+  resources:
+  - mutatingwebhookconfigurations
+  verbs:
+  - get
+  - list
+  - watch
 ...
 {{- end -}}
diff --git a/kiali-server/templates/role.yaml b/kiali-server/templates/role.yaml
@@ -99,5 +99,12 @@ rules:
   - {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }}
   verbs:
   - get
+- apiGroups: ["admissionregistration.k8s.io"]
+  resources:
+  - mutatingwebhookconfigurations
+  verbs:
+  - get
+  - list
+  - watch
 ...
 {{- end -}}