From 86c31c9ef6849340cfdc0d80d88028b4419d0929 Mon Sep 17 00:00:00 2001
From: Jayanth Varavani <1111446+jayanthvn@users.noreply.github.com>
Date: Fri, 10 Jul 2020 18:48:18 +0000
Subject: [PATCH] fix permissions for eniconfig CRD

---
 config/master/aws-k8s-cni-cn.yaml            | 12 +++++++++++-
 config/master/aws-k8s-cni-us-gov-east-1.yaml | 12 +++++++++++-
 config/master/aws-k8s-cni-us-gov-west-1.yaml | 12 +++++++++++-
 config/master/aws-k8s-cni.yaml               | 12 +++++++++++-
 config/master/manifests.jsonnet              |  7 ++++++-
 5 files changed, 50 insertions(+), 5 deletions(-)

diff --git a/config/master/aws-k8s-cni-cn.yaml b/config/master/aws-k8s-cni-cn.yaml
index 1096a84199..726278c967 100644
--- a/config/master/aws-k8s-cni-cn.yaml
+++ b/config/master/aws-k8s-cni-cn.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":
diff --git a/config/master/aws-k8s-cni-us-gov-east-1.yaml b/config/master/aws-k8s-cni-us-gov-east-1.yaml
index 6a14dc06ef..d93df77c13 100644
--- a/config/master/aws-k8s-cni-us-gov-east-1.yaml
+++ b/config/master/aws-k8s-cni-us-gov-east-1.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":
diff --git a/config/master/aws-k8s-cni-us-gov-west-1.yaml b/config/master/aws-k8s-cni-us-gov-west-1.yaml
index be527d164b..8721cb2ee8 100644
--- a/config/master/aws-k8s-cni-us-gov-west-1.yaml
+++ b/config/master/aws-k8s-cni-us-gov-west-1.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":
diff --git a/config/master/aws-k8s-cni.yaml b/config/master/aws-k8s-cni.yaml
index 9629afd9c1..c6d90a4a84 100644
--- a/config/master/aws-k8s-cni.yaml
+++ b/config/master/aws-k8s-cni.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":
diff --git a/config/master/manifests.jsonnet b/config/master/manifests.jsonnet
index 4586c4db3f..45f3e6c504 100644
--- a/config/master/manifests.jsonnet
+++ b/config/master/manifests.jsonnet
@@ -39,7 +39,12 @@ local awsnode = {
         verbs: ["get", "list", "watch"],
       },
       {
-        apiGroups: ["discovery.k8s.io"],
+        apiGroups: [""],
+        resources: ["pods", "nodes", "namespaces"],
+        verbs: ["list", "watch", "get"],
+      },
+      {
+        apiGroups: ["extensions"],
         resources: ["*"],
         verbs: ["list", "watch"],
       }