DevFW-CICD/ingress-nginx-helm
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: disable cluster wide controller role permissions (#10659)

Browse source 
Signed-off-by: AhmedGrati <ahmedgrati1999@gmail.com>
This commit is contained in:
AhmedGrati 2023-12-15 14:25:39 +01:00 committed by GitHub
parent 648cb8bb0a
commit 6c876bba9a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
charts/ingress-nginx/templates/controller-role.yaml
View file

@ -44,12 +44,15 @@ rules:
- get - get
- list - list
- watch - watch
# Omit Ingress status permissions if `--update-status` is disabled.
{{- if ne (index .Values.controller.extraArgs "update-status") "false" }}
- apiGroups: - apiGroups:
- networking.k8s.io - networking.k8s.io
resources: resources:
- ingresses/status - ingresses/status
verbs: verbs:
- update - update
{{- end }}
- apiGroups: - apiGroups:
- networking.k8s.io - networking.k8s.io
resources: resources: