From 1bbe691d075384ce2caabd5ae4138e6b7f6be701 Mon Sep 17 00:00:00 2001
From: Erik Godding Boye <egboye@gmail.com>
Date: Fri, 6 Oct 2023 18:27:51 +0200
Subject: [PATCH] fix: add missing RBAC for CSA->SSA migration of
 bundles/status

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
---
 deploy/charts/trust-manager/templates/clusterrole.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/deploy/charts/trust-manager/templates/clusterrole.yaml b/deploy/charts/trust-manager/templates/clusterrole.yaml
index 18355a7f..4a483c02 100644
--- a/deploy/charts/trust-manager/templates/clusterrole.yaml
+++ b/deploy/charts/trust-manager/templates/clusterrole.yaml
@@ -23,7 +23,8 @@ rules:
   - "trust.cert-manager.io"
   resources:
   - "bundles/status"
-  verbs: ["patch"]
+  # We also need update here so we can perform migrations from old CSA to SSA.
+  verbs: ["update", "patch"]
 
 - apiGroups:
   - ""