[stable/jaeger-operator] Update Jaeger operator permissions (#11955)

Signed-off-by: Greg Franklin <gregoryfranklin@rentalcars.com>

jaeger-operator v1.10.0 requires some additional permissions.  Without them you get
errors like:

Failed to list *v1.Role: roles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:default:jaeger-operator" cannot list roles.rbac.authorization.k8s.io in the namespace "default"

Copied and pasted the latest list of permissions from upstream

https://github.com/jaegertracing/jaeger-operator/blob/v1.10.0/deploy/role.yaml
This commit is contained in:
gregoryfranklin
2019-03-11 06:03:27 -07:00
committed by Kubernetes Prow Robot
parent ddc966d1ea
commit e8fbe86e9c
2 changed files with 40 additions and 1 deletions
+1 -1
View File
@@ -1,7 +1,7 @@
apiVersion: v1
description: jaeger-operator Helm chart for Kubernetes
name: jaeger-operator
version: 2.3.0
version: 2.3.1
appVersion: 1.10.0
home: https://www.jaegertracing.io/
icon: https://www.jaegertracing.io/img/jaeger-icon-reverse-color.svg
@@ -26,6 +26,7 @@ rules:
- events
- configmaps
- secrets
- serviceaccounts
verbs:
- "*"
- apiGroups:
@@ -49,4 +50,42 @@ rules:
- jobs
- cronjobs
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- get
- create
- apiGroups:
- route.openshift.io
resources:
- routes
verbs:
- "*"
- apiGroups:
- rbac.authorization.k8s.io
resources:
- roles
- rolebindings
verbs:
- '*'
- apiGroups:
- elasticsearch.jaegertracing.io
resources:
- jaeger
verbs:
- 'get'
- apiGroups:
- logging.openshift.io
resources:
- elasticsearches
verbs:
- '*'
- apiGroups:
- jaegertracing.io
resources:
- '*'
verbs:
- '*'
{{- end }}