From 3ab100a340aff16e995853660ab1f2e1ced3e701 Mon Sep 17 00:00:00 2001 From: chrisob Date: Thu, 14 Feb 2019 14:29:35 +0100 Subject: [PATCH] Separate ClusterRole rules in external-dns RBAC (#11129) * Separate Istio CRD rules in external-dns RBAC Signed-off-by: Chris O'Brien * Separate ingress rule resource to extensions apiGroup in external-dns RBAC Signed-off-by: Chris O'Brien * Bump external-dns chart version Signed-off-by: Chris O'Brien --- stable/external-dns/Chart.yaml | 4 ++-- stable/external-dns/templates/clusterrole.yaml | 18 +++++++++++++++--- 2 files changed, 17 insertions(+), 5 deletions(-) diff --git a/stable/external-dns/Chart.yaml b/stable/external-dns/Chart.yaml index d5bc32a635..8bffb85df3 100644 --- a/stable/external-dns/Chart.yaml +++ b/stable/external-dns/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v1 -description: +description: | Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services name: external-dns -version: 1.6.0 +version: 1.6.1 appVersion: 0.5.9 home: https://github.com/kubernetes-incubator/external-dns sources: diff --git a/stable/external-dns/templates/clusterrole.yaml b/stable/external-dns/templates/clusterrole.yaml index b0b96511fe..8ef1346cc1 100644 --- a/stable/external-dns/templates/clusterrole.yaml +++ b/stable/external-dns/templates/clusterrole.yaml @@ -8,13 +8,25 @@ metadata: rules: - apiGroups: - "" - - extensions - - networking.istio.io resources: - - ingresses - services - pods - nodes + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - networking.istio.io + resources: - gateways verbs: - get