From 0e105eddcb598a112648d75785b36bbe412923e5 Mon Sep 17 00:00:00 2001
From: Bradley Reynolds <bradley.reynolds@darbia.dev>
Date: Fri, 1 Mar 2024 23:29:31 -0600
Subject: [PATCH] Give admins permissions to create and modify roles

ref: https://discord.com/channels/1121450543462760448/1163480116568002710/1205869416953151600

Signed-off-by: Bradley Reynolds <bradley.reynolds@darbia.dev>
---
 kubernetes/manifests/roles/vipyrsec-admins.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/kubernetes/manifests/roles/vipyrsec-admins.yaml b/kubernetes/manifests/roles/vipyrsec-admins.yaml
index 92b2053..60356d8 100644
--- a/kubernetes/manifests/roles/vipyrsec-admins.yaml
+++ b/kubernetes/manifests/roles/vipyrsec-admins.yaml
@@ -12,6 +12,7 @@ rules:
   - secrets
   verbs:
   - list
+
 - apiGroups:
   - apps
   resources:
@@ -20,15 +21,30 @@ rules:
   - deployments
   verbs:
   - list
+
 - apiGroups:
   - batch
   resources:
   - jobs
   verbs:
   - list
+
 - apiGroups:
   - networking.k8s.io
   resources:
   - ingresses
   verbs:
   - list
+
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete