From db914150170f65509000c63648db6f0eb8554767 Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Sat, 14 Mar 2026 03:04:02 +0100
Subject: [PATCH] add missing permission to get namespaces to garm

---
 apps/garm/rbac.yaml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/apps/garm/rbac.yaml b/apps/garm/rbac.yaml
index fc93ab8..2a37b2b 100644
--- a/apps/garm/rbac.yaml
+++ b/apps/garm/rbac.yaml
@@ -27,3 +27,25 @@ roleRef:
   kind: Role
   name: garm-provider-k8s
   apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: garm-namespace-manager
+rules:
+  - apiGroups: [""]
+    resources: ["namespaces"]
+    verbs: ["get"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: garm-namespace-manager
+subjects:
+  - kind: ServiceAccount
+    name: garm
+    namespace: garm
+roleRef:
+  kind: ClusterRole
+  name: garm-namespace-manager
+  apiGroup: rbac.authorization.k8s.io