grant istio-reader update authority as we change to use update for mu…

…tatingwebhookconfig (istio#28650)
sel · Nov 6, 2020 · f3033c2 · f3033c2
1 parent eaacb6e
commit f3033c2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/manifests/charts/base/templates/clusterrole.yaml b/manifests/charts/base/templates/clusterrole.yaml
@@ -138,7 +138,7 @@ rules:
     verbs: ["create", "get", "list", "watch", "update"]
   - apiGroups: ["admissionregistration.k8s.io"]
     resources: ["mutatingwebhookconfigurations"]
-    verbs: ["get", "list", "watch", "patch"]
+    verbs: ["get", "list", "watch", "update", "patch"]
   - apiGroups: ["admissionregistration.k8s.io"]
     resources: ["validatingwebhookconfigurations"]
     verbs: ["get", "list", "watch", "update"]