From 099f3d1edab60918bf12101914d95d52f5c58d1c Mon Sep 17 00:00:00 2001 From: Terin Stock Date: Tue, 9 Jul 2024 22:53:23 +0200 Subject: [PATCH] fix(helm): add ClusterOriginIssuer to ClusterRole Fixes: #130 --- deploy/charts/origin-ca-issuer/Chart.yaml | 2 +- .../charts/origin-ca-issuer/templates/issuer-clusterrole.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/deploy/charts/origin-ca-issuer/Chart.yaml b/deploy/charts/origin-ca-issuer/Chart.yaml index d476c6d..d1c0f0a 100644 --- a/deploy/charts/origin-ca-issuer/Chart.yaml +++ b/deploy/charts/origin-ca-issuer/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 type: application name: origin-ca-issuer -version: 0.5.5 +version: 0.5.6 appVersion: 0.9.0 description: A Helm chart for origin-ca-issuer home: https://github.com/cloudflare/origin-ca-issuer diff --git a/deploy/charts/origin-ca-issuer/templates/issuer-clusterrole.yaml b/deploy/charts/origin-ca-issuer/templates/issuer-clusterrole.yaml index 8edc4a0..49c6980 100644 --- a/deploy/charts/origin-ca-issuer/templates/issuer-clusterrole.yaml +++ b/deploy/charts/origin-ca-issuer/templates/issuer-clusterrole.yaml @@ -24,10 +24,10 @@ rules: resources: ["certificaterequests/status"] verbs: ["get", "patch", "update"] - apiGroups: ["cert-manager.k8s.cloudflare.com"] - resources: ["originissuers"] + resources: ["originissuers", "clusteroriginissuers"] verbs: ["create", "get", "list", "watch"] - apiGroups: ["cert-manager.k8s.cloudflare.com"] - resources: ["originissuers/status"] + resources: ["originissuers/status", "clusteroriginissuers/status"] verbs: ["get", "patch", "update"] --- # permissions to approve all cert-manager.k8s.cloudflare.com requests