From 1c9efd680829e1745add8d5e28c9aa768ab927bb Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 8 Jan 2026 02:25:19 -0300
Subject: [PATCH] comms: allow MAS secrets create

---
 services/comms/mas-secrets-ensure-rbac.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/services/comms/mas-secrets-ensure-rbac.yaml b/services/comms/mas-secrets-ensure-rbac.yaml
index 9723d03..11f59c3 100644
--- a/services/comms/mas-secrets-ensure-rbac.yaml
+++ b/services/comms/mas-secrets-ensure-rbac.yaml
@@ -5,10 +5,13 @@ metadata:
   name: mas-secrets-ensure
   namespace: comms
 rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["create"]
   - apiGroups: [""]
     resources: ["secrets"]
     resourceNames: ["mas-secrets-runtime"]
-    verbs: ["get", "create", "patch", "update"]
+    verbs: ["get", "patch", "update"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding