appmanager: support init::postInstall
diff --git a/appmanager/install.yaml b/appmanager/install.yaml
index a4c9d69..b6ea5f6 100644
--- a/appmanager/install.yaml
+++ b/appmanager/install.yaml
@@ -17,14 +17,17 @@
   name: deploy-apps
 rules:
   - apiGroups: [""]
-    resources: ["namespaces", "services", "pods", "secrets"]
+    resources: ["namespaces", "services", "pods", "secrets", "serviceaccounts", "configmaps", "persistentvolumeclaims"]
     verbs: ["*"]
   - apiGroups: ["apps"]
     resources: ["deployments", "statefulsets"]
     verbs: ["*"]
   - apiGroups: ["traefik.containo.us"]
     resources: ["ingressroutes"]
-    verbs: ["*"] 
+    verbs: ["*"]
+  - apiGroups: ["rbac.authorization.k8s.io"]
+    resources: ["roles", "rolebindings"]
+    verbs: ["*"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding