From 0d59986a9137a7c7e086a437434666a7362ddb47 Mon Sep 17 00:00:00 2001
From: Deep Koluguri <deepkoluguri@gmail.com>
Date: Mon, 11 May 2026 12:48:24 -0400
Subject: [PATCH] fix: open clusterResourceWhitelist to allow webhook configs
 and all cluster-scoped resources

---
 platform/bootstrap/root-app-project.yaml | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/platform/bootstrap/root-app-project.yaml b/platform/bootstrap/root-app-project.yaml
index c54ea2c..ea68495 100644
--- a/platform/bootstrap/root-app-project.yaml
+++ b/platform/bootstrap/root-app-project.yaml
@@ -13,16 +13,8 @@ spec:
     - namespace: "*"
       server: https://kubernetes.default.svc
   clusterResourceWhitelist:
-    - group: ""
-      kind: Namespace
-    - group: "apiextensions.k8s.io"
-      kind: CustomResourceDefinition
-    - group: "rbac.authorization.k8s.io"
-      kind: ClusterRole
-    - group: "rbac.authorization.k8s.io"
-      kind: ClusterRoleBinding
-    - group: "cilium.io"
-      kind: CiliumClusterwideNetworkPolicy
+    - group: "*"
+      kind: "*"
   namespaceResourceWhitelist:
     - group: "*"
       kind: "*"