fix: add status subresource permission in clusterRole (#452)

apache · May 16, 2021 · 4a55307 · 4a55307
1 parent 5d479ae
commit 4a55307
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 12 deletions.
diff --git a/samples/deploy/rbac/apisix_view_clusterrole.yaml b/samples/deploy/rbac/apisix_view_clusterrole.yaml
@@ -119,11 +119,10 @@ rules:
   - networking.k8s.io
   resources:
   - ingresses
+  - ingresses/status
   - networkpolicies
   verbs:
-  - get
-  - list
-  - watch
+  - '*'
 - apiGroups:
   - metrics.k8s.io
   resources:
@@ -136,13 +135,14 @@ rules:
   - apisix.apache.org
   resources:
   - apisixroutes
+  - apisixroutes/status
   - apisixupstreams
+  - apisixupstreams/status
   - apisixtlses
+  - apisixtlses/status
   - apisixclusterconfigs
   verbs:
-  - get
-  - list
-  - watch
+  - '*'
 - apiGroups:
   - coordination.k8s.io
   resources:

diff --git a/test/e2e/scaffold/ingress.go b/test/e2e/scaffold/ingress.go
@@ -135,11 +135,10 @@ rules:
       - networking.k8s.io
     resources:
       - ingresses
+      - ingresses/status
       - networkpolicies
     verbs:
-      - get
-      - list
-      - watch
+      - '*'
   - apiGroups:
       - metrics.k8s.io
     resources:
@@ -152,14 +151,15 @@ rules:
       - apisix.apache.org
     resources:
       - apisixroutes
+      - apisixroutes/status
       - apisixupstreams
+      - apisixupstreams/status
       - apisixservices
       - apisixtlses
+      - apisixtlses/status
       - apisixclusterconfigs
     verbs:
-      - get
-      - list
-      - watch
+      - '*'
   - apiGroups:
     - coordination.k8s.io
     resources: