From 95de9d6ed4b2bfb8f4d482585cfcbf0a415aad21 Mon Sep 17 00:00:00 2001
From: Chip Zoller <chipzoller@gmail.com>
Date: Tue, 31 Oct 2023 01:43:55 -0400
Subject: [PATCH] add VAP and VAPB to admission controller ClusterRole (#8768)

* add VAP and VAPB to admission controller ClusterRole

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* make conditional

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* remove manual additions

Signed-off-by: chipzoller <chipzoller@gmail.com>

---------

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: chipzoller <chipzoller@gmail.com>
Signed-off-by: shuting <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
---
 .../kyverno/templates/admission-controller/clusterrole.yaml   | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/charts/kyverno/templates/admission-controller/clusterrole.yaml b/charts/kyverno/templates/admission-controller/clusterrole.yaml
index 69cc6e5b56..75e8862cbc 100644
--- a/charts/kyverno/templates/admission-controller/clusterrole.yaml
+++ b/charts/kyverno/templates/admission-controller/clusterrole.yaml
@@ -22,6 +22,10 @@ rules:
     resources:
       - mutatingwebhookconfigurations
       - validatingwebhookconfigurations
+      {{- if .Values.features.generateValidatingAdmissionPolicy.enabled }}
+      - validatingadmissionpolicies
+      - validatingadmissionpolicybindings
+      {{- end }}
     verbs:
       - create
       - delete