ceph: Add endpointslices to hardcoded RBAC roles

Add ``endpointslices`` resource and ``discovery.k8s.io`` API group
to hardcoded Role/ClusterRole definitions in ceph charts. This is
required for ``kubernetes-entrypoint`` (dep_check) which now uses
EndpointSlices instead of Endpoints to resolve service dependencies.

Affected charts:
- ceph-client: clusterrole-checkdns ClusterRole
- ceph-mon: daemonset-mon Role
- ceph-provisioners: namespace client config generator Role
- ceph-rgw: cross-namespace Role for ceph_mon namespace

Change-Id: If4b772615a75e73beada29970f393b7ed7ac8301
Signed-off-by: Sergiy Markin <smarkin@mirantis.com>

Author: Sergiy Markin

ceph-client/templates/deployment-checkdns.yaml

@@ -32,9 +32,11 @@ metadata:
 rules:
   - apiGroups:
       - ""
+      - discovery.k8s.io
     resources:
       - pods
       - endpoints
+      - endpointslices
       - pods/exec
       - namespaces
     verbs:

ceph-mon/templates/daemonset-mon.yaml

@@ -37,9 +37,11 @@ metadata:
 rules:
   - apiGroups:
       - ""
+      - discovery.k8s.io
     resources:
       - pods
       - endpoints
+      - endpointslices
     verbs:
       - get
       - list

ceph-provisioners/templates/job-namespace-client-ceph-config.yaml

@@ -60,8 +60,10 @@ metadata:
 rules:
   - apiGroups:
       - ""
+      - discovery.k8s.io
     resources:
       - endpoints
+      - endpointslices
     verbs:
       - get
       - list

ceph-rgw/templates/deployment-rgw.yaml

@@ -68,8 +68,10 @@ metadata:
 rules:
   - apiGroups:
       - ""
+      - discovery.k8s.io
     resources:
       - endpoints
+      - endpointslices
     verbs:
       - get
       - list

releasenotes/notes/ceph-client-83d68b6908878179.yaml

@@ -0,0 +1,8 @@
+---
+fixes:
+  - |
+    Add ``endpointslices`` resource and ``discovery.k8s.io`` API group to
+    the ``clusterrole-checkdns`` ClusterRole. This is required for
+    ``kubernetes-entrypoint`` (dep_check) which now uses EndpointSlices
+    instead of Endpoints to resolve service dependencies.
+...

releasenotes/notes/ceph-mon-a4dac079b9395a25.yaml

@@ -0,0 +1,8 @@
+---
+fixes:
+  - |
+    Add ``endpointslices`` resource and ``discovery.k8s.io`` API group to
+    the ceph-mon DaemonSet Role. This is required for ``kubernetes-entrypoint``
+    (dep_check) which now uses EndpointSlices instead of Endpoints to resolve
+    service dependencies.
+...

releasenotes/notes/ceph-provisioners-0c6c40ced2f1f1b6.yaml

@@ -0,0 +1,8 @@
+---
+fixes:
+  - |
+    Add ``endpointslices`` resource and ``discovery.k8s.io`` API group to
+    the ceph-provisioners namespace client config generator Role. This is
+    required for ``kubernetes-entrypoint`` (dep_check) which now uses
+    EndpointSlices instead of Endpoints to resolve service dependencies.
+...

releasenotes/notes/ceph-rgw-a3de521a7bb02183.yaml

@@ -0,0 +1,8 @@
+---
+fixes:
+  - |
+    Add ``endpointslices`` resource and ``discovery.k8s.io`` API group to
+    the ceph-rgw cross-namespace Role for the ceph_mon namespace. This is
+    required for ``kubernetes-entrypoint`` (dep_check) which now uses
+    EndpointSlices instead of Endpoints to resolve service dependencies.
+...