commit 00e199b74e1c25e204463e3ccb7276d080eb1e28
author qzhu <qzhu@cloudera.com> Fri Apr 21 13:11:34 2023 -0500
committer Craig Condit <ccondit@apache.org> Fri Apr 21 13:11:34 2023 -0500
tree 1efe18280a126e507defcb84fe560b147b594995
parent 4a603530e3c8c692f6b12fa3d307a851b2b13152

[YUNIKORN-1698] Missing namespace permissions for admission controller (#134)

Closes: #134

Signed-off-by: Craig Condit <ccondit@apache.org>

helm-charts/yunikorn/templates/admission-controller-rbac.yaml

diff --git a/helm-charts/yunikorn/templates/admission-controller-rbac.yaml b/helm-charts/yunikorn/templates/admission-controller-rbac.yaml
index acd678b..759de41 100644
--- a/helm-charts/yunikorn/templates/admission-controller-rbac.yaml
+++ b/helm-charts/yunikorn/templates/admission-controller-rbac.yaml
@@ -42,6 +42,9 @@
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get"]
+  - apiGroups: [""]
+    resources: ["namespaces"]
+    verbs: ["get", "watch", "list"]
   - apiGroups: ["scheduling.k8s.io"]
     resources: ["priorityclasses"]
     verbs: ["get", "watch", "list"]