From 10793ac11f70e6d3ec651b9aa1f2374186930a70 Mon Sep 17 00:00:00 2001
From: Matt Moyer <moyerm@vmware.com>
Date: Wed, 16 Sep 2020 15:03:36 -0500
Subject: [PATCH] Allow anonymous access to TokenCredentialRequests.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
---
 deploy/rbac.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/deploy/rbac.yaml b/deploy/rbac.yaml
index 931506cc..0600ff7f 100644
--- a/deploy/rbac.yaml
+++ b/deploy/rbac.yaml
@@ -104,6 +104,9 @@ rules:
   - apiGroups: [pinniped.dev]
     resources: [credentialrequests]
     verbs: [create]
+  - apiGroups: [login.pinniped.dev]
+    resources: [tokencredentialrequests]
+    verbs: [create]
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1