hotfix yaml agent rbac: add rbac to yaml (#3651)

Signed-off-by: Alix Cook <[email protected]>
emissary-ingress · Aug 2, 2021 · e448c45 · e448c45
1 parent 51f1efe
commit e448c45
Show file tree

Hide file tree

Showing 5 changed files with 129 additions and 0 deletions.
diff --git a/docs/yaml/aes.yaml b/docs/yaml/aes.yaml
@@ -531,6 +531,45 @@ rules:
 # Source: ambassador/templates/ambassador-agent.yaml
 apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: ClusterRole
+metadata:
+  name: ambassador-agent-deployments
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: [apps, extensions]
+  resources: [deployments]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-endpoints
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: ['']
+  resources: [endpoints]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-configmaps
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: ['']
+  resources: [configmaps]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
 metadata:
   name: ambassador-agent-rollouts
   labels:

diff --git a/docs/yaml/ambassador/ambassador-rbac.yaml b/docs/yaml/ambassador/ambassador-rbac.yaml
@@ -307,6 +307,45 @@ rules:
 ---
 # Source: ambassador/templates/ambassador-agent.yaml
 apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-deployments
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: [apps, extensions]
+  resources: [deployments]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-endpoints
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: ['']
+  resources: [endpoints]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-configmaps
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: ['']
+  resources: [configmaps]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: Role
 metadata:
   name: ambassador-agent-config

diff --git a/k8s-config/aes/require.yaml b/k8s-config/aes/require.yaml
@@ -58,6 +58,12 @@ resources:
     name: ambassador-agent
   - kind: ClusterRole
     name: ambassador-agent-pods
+  - kind: ClusterRole
+    name: ambassador-agent-deployments
+  - kind: ClusterRole
+    name: ambassador-agent-endpoints
+  - kind: ClusterRole
+    name: ambassador-agent-configmaps
   - kind: ClusterRole
     name: ambassador-agent-rollouts
   - kind: ClusterRole

diff --git a/k8s-config/ambassador-rbac/require.yaml b/k8s-config/ambassador-rbac/require.yaml
@@ -29,6 +29,12 @@ resources:
     name: ambassador-agent-rollouts
   - kind: ClusterRole
     name: ambassador-agent-applications
+  - kind: ClusterRole
+    name: ambassador-agent-deployments
+  - kind: ClusterRole
+    name: ambassador-agent-endpoints
+  - kind: ClusterRole
+    name: ambassador-agent-configmaps
   - kind: Role
     name: ambassador-agent-config
     namespace: default

diff --git a/manifests/ambassador/ambassador.yaml b/manifests/ambassador/ambassador.yaml
@@ -307,6 +307,45 @@ rules:
 ---
 # Source: ambassador/templates/ambassador-agent.yaml
 apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-deployments
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: [apps, extensions]
+  resources: [deployments]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-endpoints
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: ['']
+  resources: [endpoints]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: ambassador-agent-configmaps
+  labels:
+    rbac.getambassador.io/role-group: ambassador-agent
+    product: aes
+rules:
+- apiGroups: ['']
+  resources: [configmaps]
+  verbs: [get, list, watch]
+---
+# Source: ambassador/templates/ambassador-agent.yaml
+apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: Role
 metadata:
   name: ambassador-agent-config