fix: add missing RBAC for CSA->SSA migration of bundles/status

Signed-off-by: Erik Godding Boye <[email protected]>
cert-manager · Oct 6, 2023 · 1bbe691 · 1bbe691
1 parent a52e314
commit 1bbe691
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/deploy/charts/trust-manager/templates/clusterrole.yaml b/deploy/charts/trust-manager/templates/clusterrole.yaml
@@ -23,7 +23,8 @@ rules:
   - "trust.cert-manager.io"
   resources:
   - "bundles/status"
-  verbs: ["patch"]
+  # We also need update here so we can perform migrations from old CSA to SSA.
+  verbs: ["update", "patch"]
 
 - apiGroups:
   - ""