RBAC updated

2026-03-20 16:02:32 +05:30 · 2026-03-20 16:02:32 +05:30 · 9e23c895f3
commit 9e23c895f3
parent 0234f9fe9d
1 changed files with 5 additions and 0 deletions
--- a/templates/backstage-rbac.yaml
+++ b/templates/backstage-rbac.yaml
@ -32,6 +32,11 @@ rules:
    resources: ["serviceaccounts"]
    verbs: ["get", "list"]

+  # Read secrets for database credential discovery
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "list"]
+
  - apiGroups: ["apps"]
    resources: ["deployments", "replicasets"]
    verbs: ["get", "list", "watch"]