Allow anonymous access to TokenCredentialRequests.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-09-16 15:03:36 -05:00 · 2020-09-16 15:03:36 -05:00 · 10793ac11f
commit 10793ac11f
parent 7ce760a5dd
1 changed files with 3 additions and 0 deletions
--- a/deploy/rbac.yaml
+++ b/deploy/rbac.yaml
@ -104,6 +104,9 @@ rules:
  - apiGroups: [pinniped.dev]
    resources: [credentialrequests]
    verbs: [create]
+  - apiGroups: [login.pinniped.dev]
+    resources: [tokencredentialrequests]
+    verbs: [create]
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1