add permission for kataconfig

ComplianceAsCode · Oct 14, 2024 · 9892bce · 9892bce
1 parent e9a1bbe
commit 9892bce
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/config/rbac/api_resource_collector_cluster_role.yaml b/config/rbac/api_resource_collector_cluster_role.yaml
@@ -867,3 +867,11 @@ rules:
     verbs:
       - get
       - list
+  # Necessary to check for sandboxed-containers config for BSI requirements
+  - apiGroups:
+      - kataconfiguration.openshift.io
+    verbs:
+      - list
+      - get
+    resources:
+      - kataconfigs