From 02d13b65522d3d76a989f03e7e941b8d47d2a140 Mon Sep 17 00:00:00 2001
From: Jack Kleeman <jackkleeman@gmail.com>
Date: Wed, 14 Feb 2024 17:42:49 +0000
Subject: [PATCH] Add rbac for podidentityassociations

---
 charts/restate-operator-helm/templates/rbac.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/charts/restate-operator-helm/templates/rbac.yaml b/charts/restate-operator-helm/templates/rbac.yaml
index e0b87b9..2b70fa8 100644
--- a/charts/restate-operator-helm/templates/rbac.yaml
+++ b/charts/restate-operator-helm/templates/rbac.yaml
@@ -62,6 +62,19 @@ rules:
       - delete
     apiGroups:
       - apps
+  {{- if .Values.awsPodIdentityAssociationCluster }}
+  - resources:
+      - podidentityassociations
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - patch
+      - delete
+    apiGroups:
+      - eks.services.k8s.aws
+  {{- end }}
 ---
 # Binding the role to the account
 kind: ClusterRoleBinding