fix permissions for eniconfig CRD

aws · Jul 10, 2020 · 3c20ff4 · 3c20ff4
1 parent d070fca
commit 3c20ff4
Show file tree

Hide file tree

Showing 5 changed files with 50 additions and 5 deletions.
diff --git a/config/master/aws-k8s-cni-cn.yaml b/config/master/aws-k8s-cni-cn.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":

diff --git a/config/master/aws-k8s-cni-us-gov-east-1.yaml b/config/master/aws-k8s-cni-us-gov-east-1.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":

diff --git a/config/master/aws-k8s-cni-us-gov-west-1.yaml b/config/master/aws-k8s-cni-us-gov-west-1.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":

diff --git a/config/master/aws-k8s-cni.yaml b/config/master/aws-k8s-cni.yaml
@@ -26,7 +26,17 @@
   - "list"
   - "watch"
 - "apiGroups":
-  - "discovery.k8s.io"
+  - ""
+  "resources":
+  - "pods"
+  - "nodes"
+  - "namespaces"
+  "verbs":
+  - "list"
+  - "watch"
+  - "get"
+- "apiGroups":
+  - "extensions"
   "resources":
   - "*"
   "verbs":

diff --git a/config/master/manifests.jsonnet b/config/master/manifests.jsonnet
@@ -39,7 +39,12 @@ local awsnode = {
         verbs: ["get", "list", "watch"],
       },
       {
-        apiGroups: ["discovery.k8s.io"],
+        apiGroups: [""],
+        resources: ["pods", "nodes", "namespaces"],
+        verbs: ["list", "watch", "get"],
+      },
+      {
+        apiGroups: ["extensions"],
         resources: ["*"],
         verbs: ["list", "watch"],
       }