add secrets name in background-controller's role (kyverno#8721)

realshuting · web-flow · commit 580c02ce76c8 · 2023-10-24T09:14:34.000Z
Signed-off-by: ShutingZhao &lt;shuting@nirmata.com&gt;
diff --git a/charts/kyverno/templates/background-controller/role.yaml b/charts/kyverno/templates/background-controller/role.yaml
@@ -44,5 +44,8 @@ rules:
       - get
       - list
       - watch
+    resourceNames:
+      - {{ template "kyverno.admission-controller.serviceName" . }}.{{ template "kyverno.namespace" . }}.svc.kyverno-tls-ca
+      - {{ template "kyverno.admission-controller.serviceName" . }}.{{ template "kyverno.namespace" . }}.svc.kyverno-tls-pair
 {{- end -}}
 {{- end -}}
diff --git a/config/install-latest-testing.yaml b/config/install-latest-testing.yaml
@@ -44422,6 +44422,9 @@ rules:
       - get
       - list
       - watch
+    resourceNames:
+      - kyverno-svc.kyverno.svc.kyverno-tls-ca
+      - kyverno-svc.kyverno.svc.kyverno-tls-pair
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
