From a3d45ff43f52f08a7f75538654e3a0990656610e Mon Sep 17 00:00:00 2001
From: Huabing Zhao <zhaohuabing@gmail.com>
Date: Tue, 31 Oct 2023 07:20:53 +0000
Subject: [PATCH] fix #2127

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>
---
 charts/gateway-helm/templates/_rbac.tpl                     | 1 +
 charts/gateway-helm/templates/certgen.yaml                  | 2 +-
 charts/gateway-helm/templates/envoy-gateway-deployment.yaml | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/charts/gateway-helm/templates/_rbac.tpl b/charts/gateway-helm/templates/_rbac.tpl
index 68cbe6be8fa2..c009b66a33b1 100644
--- a/charts/gateway-helm/templates/_rbac.tpl
+++ b/charts/gateway-helm/templates/_rbac.tpl
@@ -83,6 +83,7 @@ resources:
 - envoypatchpolicies/status
 - clienttrafficpolicies/status
 - backendtrafficpolicies/status
+- securitypolicies/status
 verbs:
 - update
 {{- end }}
diff --git a/charts/gateway-helm/templates/certgen.yaml b/charts/gateway-helm/templates/certgen.yaml
index e59981bc0f66..8ba9a0a085e9 100644
--- a/charts/gateway-helm/templates/certgen.yaml
+++ b/charts/gateway-helm/templates/certgen.yaml
@@ -34,7 +34,7 @@ spec:
         - name: ENVOY_GATEWAY_CERTIFICATE_EXPIRY_DAYS
           value: "{{ .Values.deployment.envoyGateway.cert.expiryDays }}"
         image: {{ .Values.deployment.envoyGateway.image.repository }}:{{ .Values.deployment.envoyGateway.image.tag | default .Chart.AppVersion }}
-        imagePullPolicy: {{ .Values.deployment.envoyGateway.imagePullPolicy }}
+        imagePullPolicy: Never
         name: envoy-gateway-certgen
       restartPolicy: Never
       securityContext:
diff --git a/charts/gateway-helm/templates/envoy-gateway-deployment.yaml b/charts/gateway-helm/templates/envoy-gateway-deployment.yaml
index 8bcd26a0b0f7..7bad93a8da9a 100644
--- a/charts/gateway-helm/templates/envoy-gateway-deployment.yaml
+++ b/charts/gateway-helm/templates/envoy-gateway-deployment.yaml
@@ -46,7 +46,7 @@ spec:
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: {{ .Values.kubernetesClusterDomain }}
         image: {{ .Values.deployment.envoyGateway.image.repository }}:{{ .Values.deployment.envoyGateway.image.tag | default .Chart.AppVersion }}
-        imagePullPolicy: {{ .Values.deployment.envoyGateway.imagePullPolicy }}
+        imagePullPolicy: Never
         livenessProbe:
           httpGet:
             path: /healthz