Skip to content

Commit 45939f6

Browse files
committed
Update updater roles necessary for non-operator based viziers
Signed-off-by: Vihang Mehta <vihang@pixielabs.ai>
1 parent f138372 commit 45939f6

File tree

1 file changed

+44
-0
lines changed

1 file changed

+44
-0
lines changed

k8s/vizier/bootstrap/updater_role.yaml

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,15 @@ rules:
2626
- patch
2727
- update
2828
- watch
29+
- apiGroups:
30+
- ""
31+
resources:
32+
- events
33+
- pods/log
34+
verbs:
35+
- get
36+
- watch
37+
- list
2938
- apiGroups:
3039
- apps
3140
resources:
@@ -53,6 +62,41 @@ rules:
5362
- patch
5463
- update
5564
- watch
65+
- apiGroups:
66+
- coordination.k8s.io
67+
resources:
68+
- leases
69+
resourceNames:
70+
- cloud-conn-election
71+
verbs:
72+
- get
73+
- update
74+
- apiGroups:
75+
- coordination.k8s.io
76+
resources:
77+
- leases
78+
verbs:
79+
- create
80+
- apiGroups:
81+
- px.dev
82+
resources:
83+
- viziers
84+
verbs:
85+
- create
86+
- delete
87+
- get
88+
- list
89+
- patch
90+
- update
91+
- watch
92+
- apiGroups:
93+
- px.dev
94+
resources:
95+
- viziers/status
96+
verbs:
97+
- get
98+
- list
99+
- watch
56100
- apiGroups:
57101
- rbac.authorization.k8s.io
58102
resources:

0 commit comments

Comments
 (0)