Add permissions kubebuilder annotation for the user webhook

Co-authored-by: Fabian Fischer <[email protected]>
appuio · Mar 29, 2022 · 26e3901 · 26e3901
1 parent 9f024dc
commit 26e3901
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/webhooks/user_webhook.go b/webhooks/user_webhook.go
@@ -15,6 +15,8 @@ import (
 
 // +kubebuilder:webhook:path=/validate-appuio-io-v1-user,mutating=false,failurePolicy=fail,groups="appuio.io",resources=users,verbs=create;update,versions=v1,name=validate-users.appuio.io,admissionReviewVersions=v1,sideEffects=None
 
+// +kubebuilder:rbac:groups=appuio.io,resources=organizationmembers,verbs=get
+
 // UserValidator holds context for the validating admission webhook for users.appuio.io
 type UserValidator struct {
 	client  client.Client