From 556dbb965cd4be57577801068eb3f598795ba8bc Mon Sep 17 00:00:00 2001
From: Jerome Petazzoni <jerome.petazzoni@gmail.com>
Date: Sun, 15 Nov 2020 18:44:17 +0100
Subject: [PATCH] Add networking.k8s.io permissions to Traefik v2

---
 k8s/test.yaml       | 17 +++++++++++++++++
 k8s/traefik-v2.yaml |  9 +++++++++
 2 files changed, 26 insertions(+)
 create mode 100644 k8s/test.yaml

diff --git a/k8s/test.yaml b/k8s/test.yaml
new file mode 100644
index 00000000..289d0e58
--- /dev/null
+++ b/k8s/test.yaml
@@ -0,0 +1,17 @@
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: whatever
+spec:
+  #tls:
+  #- secretName: whatever.A.B.C.D.nip.io
+  #  hosts:
+  #  - whatever.A.B.C.D.nip.io
+  rules:
+  - host: whatever.nip.io
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: whatever
+          servicePort: 1234
diff --git a/k8s/traefik-v2.yaml b/k8s/traefik-v2.yaml
index c8705a7e..6a75c4c5 100644
--- a/k8s/traefik-v2.yaml
+++ b/k8s/traefik-v2.yaml
@@ -98,6 +98,15 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - networking.k8s.io
+    resources:
+      - ingresses
+      - ingressclasses
+    verbs:
+      - get
+      - list
+      - watch
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1