💫 Add permission to update namespace finalizer

Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>
knative · Jun 14, 2021 · f97c29c · f97c29c
1 parent 393e411
commit f97c29c
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/config/core/roles/webhook-clusterrole.yaml b/config/core/roles/webhook-clusterrole.yaml
@@ -42,6 +42,14 @@ rules:
       - "watch"
       - "patch"
 
+  # finalizers are needed for the owner reference of the webhook
+  - apiGroups:
+      - ""
+    resources:
+      - "namespaces/finalizers"
+    verbs:
+      - "update"
+
   # For getting our Deployment so we can decorate with ownerref.
   - apiGroups:
       - "apps"