DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix ingress rbac roles

Browse source 
There was 2 things that the current IC (0.9 beta7) needs.

The ClusterRole was missing `get nodes`:

```
RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "get" resource "nodes" named "xxx" cluster-wide
```

The Role was missing `update configmaps`:

```RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "update" resource "configmaps" named "ingress-controller-leader-nginx" in namespace "kube-system"```
This commit is contained in:
Puja 2017-06-01 17:00:40 +02:00 committed by GitHub
parent a6bba68233
commit c96758a7d5
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
examples/rbac/nginx/nginx-ingress-controller-rbac.yml
View file

@ -23,6 +23,7 @@ rules:
- pods - pods
- secrets - secrets
verbs: verbs:
- get
- list - list
- watch - watch
- apiGroups: - apiGroups:
@ -69,6 +70,7 @@ rules:
- secrets - secrets
verbs: verbs:
- get - get
- update
- apiGroups: - apiGroups:
- "" - ""
resources: resources: