From e8fbe86e9ccffc49b1c14c3e6bee47e134e6e367 Mon Sep 17 00:00:00 2001
From: gregoryfranklin <45693481+gregoryfranklin@users.noreply.github.com>
Date: Mon, 11 Mar 2019 13:03:27 +0000
Subject: [PATCH] [stable/jaeger-operator] Update Jaeger operator permissions
 (#11955)

Signed-off-by: Greg Franklin <gregoryfranklin@rentalcars.com>

jaeger-operator v1.10.0 requires some additional permissions.  Without them you get
errors like:

Failed to list *v1.Role: roles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:default:jaeger-operator" cannot list roles.rbac.authorization.k8s.io in the namespace "default"

Copied and pasted the latest list of permissions from upstream

https://github.com/jaegertracing/jaeger-operator/blob/v1.10.0/deploy/role.yaml
---
 stable/jaeger-operator/Chart.yaml          |  2 +-
 stable/jaeger-operator/templates/role.yaml | 39 ++++++++++++++++++++++
 2 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/stable/jaeger-operator/Chart.yaml b/stable/jaeger-operator/Chart.yaml
index 71c7763fca..0d051cc2ba 100644
--- a/stable/jaeger-operator/Chart.yaml
+++ b/stable/jaeger-operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 description: jaeger-operator Helm chart for Kubernetes
 name: jaeger-operator
-version: 2.3.0
+version: 2.3.1
 appVersion: 1.10.0
 home: https://www.jaegertracing.io/
 icon: https://www.jaegertracing.io/img/jaeger-icon-reverse-color.svg
diff --git a/stable/jaeger-operator/templates/role.yaml b/stable/jaeger-operator/templates/role.yaml
index 264512e859..b3eee1a995 100644
--- a/stable/jaeger-operator/templates/role.yaml
+++ b/stable/jaeger-operator/templates/role.yaml
@@ -26,6 +26,7 @@ rules:
   - events
   - configmaps
   - secrets
+  - serviceaccounts
   verbs:
   - "*"
 - apiGroups:
@@ -49,4 +50,42 @@ rules:
   - jobs
   - cronjobs
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - servicemonitors
+  verbs:
+  - get
+  - create
+- apiGroups:
+  - route.openshift.io
+  resources:
+  - routes
+  verbs:
+  - "*"
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  - rolebindings
+  verbs:
+  - '*'
+- apiGroups:
+  - elasticsearch.jaegertracing.io
+  resources:
+  - jaeger
+  verbs:
+  - 'get'
+- apiGroups:
+  - logging.openshift.io
+  resources:
+  - elasticsearches
+  verbs:
+  - '*'
+- apiGroups:
+  - jaegertracing.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
 {{- end }}