From 9e23c895f37524a45fdc70875954e86d0ae94975 Mon Sep 17 00:00:00 2001
From: Vaibhav Pathak <vaibhav.pathak@Vaibhavs-MacBook-Air.local>
Date: Fri, 20 Mar 2026 16:02:32 +0530
Subject: [PATCH] RBAC updated

---
 templates/backstage-rbac.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/templates/backstage-rbac.yaml b/templates/backstage-rbac.yaml
index 45acb59..fc6afc2 100644
--- a/templates/backstage-rbac.yaml
+++ b/templates/backstage-rbac.yaml
@@ -32,6 +32,11 @@ rules:
     resources: ["serviceaccounts"]
     verbs: ["get", "list"]
 
+  # Read secrets for database credential discovery
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "list"]
+
   - apiGroups: ["apps"]
     resources: ["deployments", "replicasets"]
     verbs: ["get", "list", "watch"]