include list,watch/namespace permission

Azure · Aug 29, 2023 · 04c3e5e · 04c3e5e
1 parent b86f38a
commit 04c3e5e
Show file tree

Hide file tree

Showing 6 changed files with 11 additions and 6 deletions.
diff --git a/pkg/manifests/fixtures/nginx/full.json b/pkg/manifests/fixtures/nginx/full.json
@@ -77,7 +77,8 @@
             "endpoints",
             "nodes",
             "pods",
-            "secrets"
+            "secrets",
+            "namespaces"
           ]
         },
         {

diff --git a/pkg/manifests/fixtures/nginx/internal.json b/pkg/manifests/fixtures/nginx/internal.json
@@ -77,7 +77,8 @@
             "endpoints",
             "nodes",
             "pods",
-            "secrets"
+            "secrets",
+            "namespaces"
           ]
         },
         {

diff --git a/pkg/manifests/fixtures/nginx/kube-system.json b/pkg/manifests/fixtures/nginx/kube-system.json
@@ -39,7 +39,8 @@
             "endpoints",
             "nodes",
             "pods",
-            "secrets"
+            "secrets",
+            "namespaces"
           ]
         },
         {

diff --git a/pkg/manifests/fixtures/nginx/no-ownership.json b/pkg/manifests/fixtures/nginx/no-ownership.json
@@ -53,7 +53,8 @@
             "endpoints",
             "nodes",
             "pods",
-            "secrets"
+            "secrets",
+            "namespaces"
           ]
         },
         {

diff --git a/pkg/manifests/fixtures/nginx/optional-features-disabled.json b/pkg/manifests/fixtures/nginx/optional-features-disabled.json
@@ -53,7 +53,8 @@
             "endpoints",
             "nodes",
             "pods",
-            "secrets"
+            "secrets",
+            "namespaces"
           ]
         },
         {

diff --git a/pkg/manifests/nginx.go b/pkg/manifests/nginx.go
@@ -153,7 +153,7 @@ func newNginxIngressControllerClusterRole(conf *config.Config, ingressConfig *Ng
 			// https://github.com/kubernetes/ingress-nginx/blob/ab99e23bba4404ab5fd036e15fb178014cca1a2f/charts/ingress-nginx/templates/clusterrole.yaml#L7
 			{
 				APIGroups: []string{""},
-				Resources: []string{"configmaps", "endpoints", "nodes", "pods", "secrets"},
+				Resources: []string{"configmaps", "endpoints", "nodes", "pods", "secrets", "namespaces"},
 				Verbs:     []string{"list", "watch"},
 			},
 			{