From c1e723ad044412d4b7a93a602f30ec93592e4f6f Mon Sep 17 00:00:00 2001
From: isaac <isaac.hawley@nginx.com>
Date: Wed, 15 Aug 2018 14:14:57 +0100
Subject: [PATCH] Selectively enable permissions for status update

The IC only requires ingress/status update permissions if
report-ingress-status is enabled.
---
 helm-chart/templates/rbac.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/helm-chart/templates/rbac.yaml b/helm-chart/templates/rbac.yaml
index 79ea8acb44..d698b92648 100644
--- a/helm-chart/templates/rbac.yaml
+++ b/helm-chart/templates/rbac.yaml
@@ -56,12 +56,14 @@ rules:
   verbs:
   - list
   - watch
+{{- if .Values.controller.reportIngressStatus.enable }}
 - apiGroups:
   - "extensions"
   resources:
   - ingresses/status
   verbs:
   - update
+{{- end }}
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1