From cdc92be6ca113908e1fa8575214c2333e2939d64 Mon Sep 17 00:00:00 2001 From: yu-croco Date: Sat, 13 Jul 2024 09:38:14 +0900 Subject: [PATCH] fix(argo-rollouts): Add missing permissions Signed-off-by: yu-croco --- charts/argo-rollouts/Chart.yaml | 6 +++--- charts/argo-rollouts/templates/controller/clusterrole.yaml | 3 ++- charts/argo-rollouts/templates/controller/role.yaml | 6 +++++- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/charts/argo-rollouts/Chart.yaml b/charts/argo-rollouts/Chart.yaml index 53066aa5..3dc8b6c9 100644 --- a/charts/argo-rollouts/Chart.yaml +++ b/charts/argo-rollouts/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 appVersion: v1.7.1 description: A Helm chart for Argo Rollouts name: argo-rollouts -version: 2.37.2 +version: 2.37.3 home: https://github.com/argoproj/argo-helm icon: https://argoproj.github.io/argo-rollouts/assets/logo.png keywords: @@ -18,5 +18,5 @@ annotations: fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252 url: https://argoproj.github.io/argo-helm/pgp_keys.asc artifacthub.io/changes: | - - kind: added - description: Added traefik.io apiGroup to Role and ClusterRole + - kind: fixed + description: Add missing permission diff --git a/charts/argo-rollouts/templates/controller/clusterrole.yaml b/charts/argo-rollouts/templates/controller/clusterrole.yaml index 70c3bdf8..4cb0b0b4 100644 --- a/charts/argo-rollouts/templates/controller/clusterrole.yaml +++ b/charts/argo-rollouts/templates/controller/clusterrole.yaml @@ -67,6 +67,7 @@ rules: - get - list - watch + - update # services patch needed to update selector of canary/stable/active/preview services # services create needed to create and delete services for experiments - apiGroups: @@ -109,7 +110,7 @@ rules: {{- if .Values.providerRBAC.providers.gatewayAPI }} - create - update -{{- end }} +{{- end }} # pod list/update needed for updating ephemeral data - apiGroups: - "" diff --git a/charts/argo-rollouts/templates/controller/role.yaml b/charts/argo-rollouts/templates/controller/role.yaml index fdce087e..21d32ce1 100644 --- a/charts/argo-rollouts/templates/controller/role.yaml +++ b/charts/argo-rollouts/templates/controller/role.yaml @@ -68,6 +68,7 @@ rules: - get - list - watch + - update # services patch needed to update selector of canary/stable/active/preview services # services create needed to create and delete services for experiments - apiGroups: @@ -110,7 +111,7 @@ rules: {{- if .Values.providerRBAC.providers.gatewayAPI }} - create - update -{{- end }} +{{- end }} # pod list/update needed for updating ephemeral data - apiGroups: - "" @@ -293,5 +294,8 @@ rules: - watch - update {{- end }} +{{- with .Values.providerRBAC.additionalRules }} +{{ toYaml . }} +{{- end }} {{- end }} {{- end }}