From 9374f9bef85e9fc435865e4192b3a9683463e53f Mon Sep 17 00:00:00 2001 From: Fabian Fischer Date: Mon, 31 Jan 2022 12:56:26 +0100 Subject: [PATCH] Give organization admins the option to manage rolebindings --- config/user-rbac/organization-admin-role.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/user-rbac/organization-admin-role.yml b/config/user-rbac/organization-admin-role.yml index dd24522b..448e6bc0 100644 --- a/config/user-rbac/organization-admin-role.yml +++ b/config/user-rbac/organization-admin-role.yml @@ -9,3 +9,6 @@ rules: - apiGroups: ["appuio.io"] resources: ["organizationmembers"] verbs: ["get", "watch", "list", "patch", "edit", "create"] +- apiGroups: ["rbac.authorization.k8s.io"] + resources: ["rolebindings"] + verbs: ["get", "watch", "list", "patch", "edit", "create"]