Selectively enable permissions for status update

The IC only requires ingress/status update permissions if report-ingress-status is enabled.
nginx · Aug 16, 2018 · c1e723a · c1e723a
1 parent f7fea6b
commit c1e723a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/helm-chart/templates/rbac.yaml b/helm-chart/templates/rbac.yaml
@@ -56,12 +56,14 @@ rules:
   verbs:
   - list
   - watch
+{{- if .Values.controller.reportIngressStatus.enable }}
 - apiGroups:
   - "extensions"
   resources:
   - ingresses/status
   verbs:
   - update
+{{- end }}
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1