From 878383f19b7cd90485ea914cd5a3057dca3d01f5 Mon Sep 17 00:00:00 2001
From: 0xFEEDC0DE64 <daniel@brunner.ninja>
Date: Mon, 12 Oct 2026 10:45:44 +0200
Subject: [PATCH] Allow rollout watch for restricted Diun deployer

---
 ci-deployer.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci-deployer.yaml b/ci-deployer.yaml
index b012604..b48fa7b 100644
--- a/ci-deployer.yaml
+++ b/ci-deployer.yaml
@@ -18,7 +18,7 @@ rules:
   - apiGroups: ["apps"]
     resources: ["deployments"]
     resourceNames: ["diun"]
-    verbs: ["get", "patch", "update"]
+    verbs: ["get", "patch", "update", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding