From 46c78fb31a051fbaf429ade59fad6bef435648a2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?S=C3=A9bastien=20Huss?= <sebastien.huss@gmail.com>
Date: Fri, 19 Jan 2024 17:01:09 +0100
Subject: [PATCH] fix

---
 apps/gramo/index.yaml | 36 ++++++++++++++++++------------------
 apps/gramo/rbac.tf    |  5 ++++-
 2 files changed, 22 insertions(+), 19 deletions(-)

diff --git a/apps/gramo/index.yaml b/apps/gramo/index.yaml
index d58c5a8..9df05fb 100644
--- a/apps/gramo/index.yaml
+++ b/apps/gramo/index.yaml
@@ -6,11 +6,11 @@ metadata:
   name: gramo
   description: null
 options:
-  issuer:
-    default: letsencrypt-prod
+  managed:
+    default: false
     examples:
-    - letsencrypt-prod
-    type: string
+    - false
+    type: boolean
   namespaces:
     default: []
     items:
@@ -21,6 +21,16 @@ options:
     examples:
     - infra
     type: string
+  ingress-class:
+    default: traefik
+    examples:
+    - traefik
+    type: string
+  cluster-admin:
+    default: false
+    examples:
+    - false
+    type: boolean
   images:
     default:
       gramo:
@@ -60,21 +70,16 @@ options:
             type: string
         type: object
     type: object
-  cluster-admin:
-    default: false
+  issuer:
+    default: letsencrypt-prod
     examples:
-    - false
-    type: boolean
+    - letsencrypt-prod
+    type: string
   domain-name:
     default: your_company.com
     examples:
     - your_company.com
     type: string
-  managed:
-    default: false
-    examples:
-    - false
-    type: boolean
   sub-domain:
     default: gramo
     examples:
@@ -85,11 +90,6 @@ options:
     examples:
     - your-company
     type: string
-  ingress-class:
-    default: traefik
-    examples:
-    - traefik
-    type: string
 dependencies:
 - dist: null
   category: share
diff --git a/apps/gramo/rbac.tf b/apps/gramo/rbac.tf
index 9f63bec..2659ccd 100644
--- a/apps/gramo/rbac.tf
+++ b/apps/gramo/rbac.tf
@@ -77,7 +77,10 @@ resource "kubectl_manifest" "gramo_clusterrole" {
       labels: ${jsonencode(local.common-labels)}
     rules:
     - apiGroups: [""]
-      resources: ["namespaces"]
+      resources: ["namespaces","customresourcedefinitions"]
+      verbs: ["get","list"]
+    - apiGroups: ["apiextensions.k8s.io"]
+      resources: ["customresourcedefinitions"]
       resourceNames: ${jsonencode(local.sorted-namespaces)}
       verbs: ["get"]
     - apiGroups: [""]