commit d0a0b18e54a8adf118305bf6d22b3441df2df342
author Patryk Jakuszew <patryk@hackerspace.pl> Tue Jan 25 21:05:49 2022 +0100
committer patryk <patryk@hackerspace.pl> Sat Feb 05 15:08:47 2022 +0000
tree 75c35e29a108ee07ee7fcb71761e6124089e135e
parent f642e8672495299bb0079dc8066b63bd39aa32f3

cluster: allow namespace admins to access certificate resources

Change-Id: I532dadfe1799da43d12598e388141f8f9a3872de
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1250
Reviewed-by: q3k <q3k@hackerspace.pl>

cluster/kube/cluster.libsonnet

diff --git a/cluster/kube/cluster.libsonnet b/cluster/kube/cluster.libsonnet
index 816a8aa..8305033 100644
--- a/cluster/kube/cluster.libsonnet
+++ b/cluster/kube/cluster.libsonnet
@@ -126,6 +126,11 @@
                     resources: ["ingresses"],
                     verbs: ["*"],
                 },
+                {
+                    apiGroups: ["certmanager.k8s.io"],
+                    resources: ["certificates"],
+                    verbs: ["*"],
+                },
             ],
         },
         // This ClusterRoleBindings allows root access to cluster admins.