add additional role permisson needed during upgrade of nginx

Azure · Aug 30, 2023 · 7c174f4 · 7c174f4
1 parent 0a1783e
commit 7c174f4
Show file tree

Hide file tree

Showing 6 changed files with 61 additions and 0 deletions.
diff --git a/pkg/manifests/fixtures/nginx/full.json b/pkg/manifests/fixtures/nginx/full.json
@@ -247,6 +247,17 @@
             "namespaces"
           ]
         },
+        {
+          "verbs": [
+            "update"
+          ],
+          "apiGroups": [
+            ""
+          ],
+          "resources": [
+            "configmaps"
+          ]
+        },
         {
           "verbs": [
             "get",

diff --git a/pkg/manifests/fixtures/nginx/internal.json b/pkg/manifests/fixtures/nginx/internal.json
@@ -247,6 +247,17 @@
             "namespaces"
           ]
         },
+        {
+          "verbs": [
+            "update"
+          ],
+          "apiGroups": [
+            ""
+          ],
+          "resources": [
+            "configmaps"
+          ]
+        },
         {
           "verbs": [
             "get",

diff --git a/pkg/manifests/fixtures/nginx/kube-system.json b/pkg/manifests/fixtures/nginx/kube-system.json
@@ -193,6 +193,17 @@
             "namespaces"
           ]
         },
+        {
+          "verbs": [
+            "update"
+          ],
+          "apiGroups": [
+            ""
+          ],
+          "resources": [
+            "configmaps"
+          ]
+        },
         {
           "verbs": [
             "get",

diff --git a/pkg/manifests/fixtures/nginx/no-ownership.json b/pkg/manifests/fixtures/nginx/no-ownership.json
@@ -207,6 +207,17 @@
             "namespaces"
           ]
         },
+        {
+          "verbs": [
+            "update"
+          ],
+          "apiGroups": [
+            ""
+          ],
+          "resources": [
+            "configmaps"
+          ]
+        },
         {
           "verbs": [
             "get",

diff --git a/pkg/manifests/fixtures/nginx/optional-features-disabled.json b/pkg/manifests/fixtures/nginx/optional-features-disabled.json
@@ -207,6 +207,17 @@
             "namespaces"
           ]
         },
+        {
+          "verbs": [
+            "update"
+          ],
+          "apiGroups": [
+            ""
+          ],
+          "resources": [
+            "configmaps"
+          ]
+        },
         {
           "verbs": [
             "get",

diff --git a/pkg/manifests/nginx.go b/pkg/manifests/nginx.go
@@ -217,6 +217,12 @@ func newNginxIngressControllerRole(conf *config.Config, ingressConfig *NginxIngr
 				Resources: []string{"namespaces"},
 				Verbs:     []string{"get"},
 			},
+			// temporary permission used for update from 1.3.0->1.8.1
+			{
+				APIGroups: []string{""},
+				Resources: []string{"configmaps"},
+				Verbs:     []string{"update"},
+			},
 			{
 				APIGroups: []string{""},
 				Resources: []string{"configmaps", "pods", "secrets", "endpoints"},