Add rbac for podidentityassociations

restatedev · Feb 14, 2024 · 02d13b6 · 02d13b6
1 parent f5a580c
commit 02d13b6
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/charts/restate-operator-helm/templates/rbac.yaml b/charts/restate-operator-helm/templates/rbac.yaml
@@ -62,6 +62,19 @@ rules:
       - delete
     apiGroups:
       - apps
+  {{- if .Values.awsPodIdentityAssociationCluster }}
+  - resources:
+      - podidentityassociations
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - patch
+      - delete
+    apiGroups:
+      - eks.services.k8s.aws
+  {{- end }}
 ---
 # Binding the role to the account
 kind: ClusterRoleBinding