From e61880854dd028995895897411265746898b28b5 Mon Sep 17 00:00:00 2001
From: Homaja Marisetty <116022361+hmariset@users.noreply.github.com>
Date: Tue, 7 Jan 2025 12:06:26 -0500
Subject: [PATCH] chore(KFLUXVNGD-93): Grant appstudio-pipelines-runner
 permissions to manage namespaces (#5232)

Grant the appstudio-pipelines-runner serviceaccount permission to manage
namespaces.eaas.konflux-ci.dev resources.

Jira-Url: https://issues.redhat.com/browse/KFLUXVNGD-93

Signed-off-by: Homaja Marisetty <hmariset@redhat.com>
---
 .../base/rbac/appstudio-pipelines-runner.yaml          | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/components/sandbox/toolchain-member-operator/base/rbac/appstudio-pipelines-runner.yaml b/components/sandbox/toolchain-member-operator/base/rbac/appstudio-pipelines-runner.yaml
index 330d08db80a..82154cee124 100644
--- a/components/sandbox/toolchain-member-operator/base/rbac/appstudio-pipelines-runner.yaml
+++ b/components/sandbox/toolchain-member-operator/base/rbac/appstudio-pipelines-runner.yaml
@@ -35,6 +35,16 @@ rules:
       - toolchain.dev.openshift.com
     resources:
       - spacerequests
+  - verbs:
+      - get
+      - create
+      - delete
+      - list
+      - watch
+    apiGroups:
+      - eaas.konflux-ci.dev
+    resources:
+      - namespaces
   - verbs:
       - get
       - list