services/comms/mas-secrets-ensure-rbac.yaml

@@ -5,10 +5,13 @@ metadata:
   name: mas-secrets-ensure
   namespace: comms
 rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["create"]
   - apiGroups: [""]
     resources: ["secrets"]
     resourceNames: ["mas-secrets-runtime"]
-    verbs: ["get", "create", "patch", "update"]
+    verbs: ["get", "patch", "update"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding