From 5dd21b798ab1f994a5d080e6f202276e3bf660a8 Mon Sep 17 00:00:00 2001 From: chaosinthecrd Date: Mon, 12 May 2025 11:29:41 +0100 Subject: [PATCH] k8s-operator: adding endpointslice read to operator clusterrole Signed-off-by: chaosinthecrd --- .../deploy/chart/templates/operator-rbac.yaml | 3 +++ cmd/k8s-operator/deploy/manifests/operator.yaml | 8 ++++++++ 2 files changed, 11 insertions(+) diff --git a/cmd/k8s-operator/deploy/chart/templates/operator-rbac.yaml b/cmd/k8s-operator/deploy/chart/templates/operator-rbac.yaml index 5bf50617e..00d8318ac 100644 --- a/cmd/k8s-operator/deploy/chart/templates/operator-rbac.yaml +++ b/cmd/k8s-operator/deploy/chart/templates/operator-rbac.yaml @@ -25,6 +25,9 @@ rules: - apiGroups: ["networking.k8s.io"] resources: ["ingressclasses"] verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: ["endpointslices"] + verbs: ["get", "list", "watch"] - apiGroups: ["tailscale.com"] resources: ["connectors", "connectors/status", "proxyclasses", "proxyclasses/status", "proxygroups", "proxygroups/status"] verbs: ["get", "list", "watch", "update"] diff --git a/cmd/k8s-operator/deploy/manifests/operator.yaml b/cmd/k8s-operator/deploy/manifests/operator.yaml index 9bfbd533f..bd0a0cc16 100644 --- a/cmd/k8s-operator/deploy/manifests/operator.yaml +++ b/cmd/k8s-operator/deploy/manifests/operator.yaml @@ -4798,6 +4798,14 @@ rules: - get - list - watch + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - tailscale.com resources: