From dc0a420ea5167f9c0fdcb8d5f143329718218388 Mon Sep 17 00:00:00 2001
From: Calle Pettersson <carlpett@users.noreply.github.com>
Date: Mon, 25 Mar 2024 12:27:10 +0100
Subject: [PATCH] Add permissions required for flow control

Signed-off-by: Calle Pettersson <carlpett@users.noreply.github.com>
---
 manifests/rbac/controller.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifests/rbac/controller.yaml b/manifests/rbac/controller.yaml
index c444c58eda..c3537d5ba2 100644
--- a/manifests/rbac/controller.yaml
+++ b/manifests/rbac/controller.yaml
@@ -69,6 +69,11 @@ rules:
   - update
   - patch
   - delete
+# required for flow control
+- nonResourceURLs:
+    - /livez/ping
+  verbs:
+    - head
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding