Skip to content
This repository has been archived by the owner on May 13, 2024. It is now read-only.

Commit

Permalink
fix: permission issue
Browse files Browse the repository at this point in the history
Signed-off-by: Lin Yang <reaver@flomesh.io>
  • Loading branch information
reaver-flomesh committed May 16, 2023
1 parent de1f526 commit 7bf11ff
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 9 deletions.
12 changes: 4 additions & 8 deletions charts/fsm/templates/fsm-role.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -40,11 +40,11 @@ rules:

- apiGroups: [ "" ]
resources: [ "serviceaccounts" ]
{{- if and .Values.fsm.ingress.enabled (not .Values.fsm.gatewayApi.enabled) .Values.fsm.ingress.namespaced (semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion) }}
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
{{- else }}
verbs: [ "list", "get", "watch" ]
{{- end }}

- apiGroups: ["rbac.authorization.k8s.io"]
resources: ["roles", "rolebindings"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]

{{- if .Values.fsm.serviceLB.enabled }}
- apiGroups: [""]
Expand Down Expand Up @@ -115,9 +115,5 @@ rules:
- apiGroups: ["flomesh.io"]
resources: ["namespacedingresses/status"]
verbs: ["get", "patch", "update"]

- apiGroups: ["rbac.authorization.k8s.io"]
resources: ["roles", "rolebindings"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
{{- end }}
{{- end }}
2 changes: 1 addition & 1 deletion charts/gateway/templates/service.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ spec:
- name: {{ $listener.name }}
port: {{ $listener.port }}
targetPort: {{ $listener.port }}
protocol: {{ $listener.protocol }}
protocol: TCP
{{- end }}
selector:
{{- include "fsm.gateway.selectorLabels" . | nindent 4 }}
Expand Down

0 comments on commit 7bf11ff

Please sign in to comment.