From fed1fcda59450999ee61983c5136b8ed66b4acf7 Mon Sep 17 00:00:00 2001
From: Vadym Popov <vadym.popov@goteleport.com>
Date: Tue, 17 Sep 2024 14:27:08 -0400
Subject: [PATCH] Add permission for proxy to access resources

---
 lib/authz/permissions.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/authz/permissions.go b/lib/authz/permissions.go
index a235e11b8edb1..de3c1c070c1b0 100644
--- a/lib/authz/permissions.go
+++ b/lib/authz/permissions.go
@@ -913,6 +913,8 @@ func roleSpecForProxy(clusterName string) types.RoleSpecV6 {
 				types.NewRule(types.KindSAMLIdPServiceProvider, services.RO()),
 				types.NewRule(types.KindUserGroup, services.RO()),
 				types.NewRule(types.KindClusterMaintenanceConfig, services.RO()),
+				types.NewRule(types.KindAutoUpdateConfig, services.RO()),
+				types.NewRule(types.KindAutoUpdateVersion, services.RO()),
 				types.NewRule(types.KindIntegration, append(services.RO(), types.VerbUse)),
 				types.NewRule(types.KindAuditQuery, services.RO()),
 				types.NewRule(types.KindSecurityReport, services.RO()),