update aro rbac

mfojtik · Aug 26, 2020 · d9dbd9b · d9dbd9b
1 parent cc8935f
commit d9dbd9b
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/projects/azure/rbac.yaml b/projects/azure/rbac.yaml
@@ -84,7 +84,7 @@ items:
   apiVersion: rbac.authorization.k8s.io/v1
   metadata:
     namespace: azure
-    name: secret-refresher
+    name: secret-admin
   rules:
   - apiGroups: [""]
     resources: ["secrets"]
@@ -93,15 +93,18 @@ items:
 - kind: RoleBinding
   apiVersion: rbac.authorization.k8s.io/v1
   metadata:
-    name: secret-refresher
+    name: secret-admin
     namespace: azure
   subjects:
   - kind: ServiceAccount
-    name: secret-refresher
+    name: secret-admin
     namespace: azure-private
+  - kind: ServiceAccount
+    name: ci-operator
+    namespace: ci
   roleRef:
     kind: Role
-    name: secret-refresher
+    name: secret-admin
     namespace: azure
 
 # ci-operator can promote images in the azure namespace