Add secret get/list for webhook rbac (#1704)

pingcap · Feb 15, 2020 · d43d3d6 · d43d3d6
1 parent 87f2acf
commit d43d3d6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml b/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml
@@ -27,6 +27,9 @@ rules:
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get", "list", "watch", "update"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "list"]
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create","patch","update"]