Adds Update Verb to Gateway RBAC

Signed-off-by: Daneyon Hansen <daneyonhansen@gmail.com>
projectcontour · Jun 15, 2021 · 6b45a4e · 6b45a4e
1 parent eafb94c
commit 6b45a4e
Show file tree

Hide file tree

Showing 5 changed files with 31 additions and 6 deletions.
diff --git a/examples/contour/02-role-contour.yaml b/examples/contour/02-role-contour.yaml
@@ -84,7 +84,6 @@ rules:
   resources:
   - backendpolicies
   - gatewayclasses
-  - gateways
   - httproutes
   - tcproutes
   - tlsroutes
@@ -105,6 +104,15 @@ rules:
   - udproutes/status
   verbs:
   - update
+- apiGroups:
+  - networking.x-k8s.io
+  resources:
+  - gateways
+  verbs:
+  - get
+  - list
+  - update
+  - watch
 - apiGroups:
   - projectcontour.io
   resources:

diff --git a/examples/gateway/02-gateway.yaml b/examples/gateway/02-gateway.yaml
@@ -4,12 +4,12 @@ metadata:
   name: contour
   namespace: projectcontour
 spec:
-  gatewayClassName: example
+  gatewayClassName: contour-class
   listeners:
     - protocol: HTTP
       port: 80
       routes:
         kind: HTTPRoute
         selector:
           matchLabels:
-            app: kuard
+            app: filter
diff --git a/examples/render/contour-gateway.yaml b/examples/render/contour-gateway.yaml
@@ -2830,7 +2830,6 @@ rules:
   resources:
   - backendpolicies
   - gatewayclasses
-  - gateways
   - httproutes
   - tcproutes
   - tlsroutes
@@ -2851,6 +2850,15 @@ rules:
   - udproutes/status
   verbs:
   - update
+- apiGroups:
+  - networking.x-k8s.io
+  resources:
+  - gateways
+  verbs:
+  - get
+  - list
+  - update
+  - watch
 - apiGroups:
   - projectcontour.io
   resources:

diff --git a/examples/render/contour.yaml b/examples/render/contour.yaml
@@ -2827,7 +2827,6 @@ rules:
   resources:
   - backendpolicies
   - gatewayclasses
-  - gateways
   - httproutes
   - tcproutes
   - tlsroutes
@@ -2848,6 +2847,15 @@ rules:
   - udproutes/status
   verbs:
   - update
+- apiGroups:
+  - networking.x-k8s.io
+  resources:
+  - gateways
+  verbs:
+  - get
+  - list
+  - update
+  - watch
 - apiGroups:
   - projectcontour.io
   resources:

diff --git a/internal/k8s/informers.go b/internal/k8s/informers.go
@@ -48,7 +48,8 @@ func IngressV1Resources() []schema.GroupVersionResource {
 	}
 }
 
-// +kubebuilder:rbac:groups="networking.x-k8s.io",resources=gatewayclasses;gateways;httproutes;backendpolicies;tlsroutes;tcproutes;udproutes,verbs=get;list;watch
+// +kubebuilder:rbac:groups="networking.x-k8s.io",resources=gateways,verbs=get;list;watch;update
+// +kubebuilder:rbac:groups="networking.x-k8s.io",resources=gatewayclasses;httproutes;backendpolicies;tlsroutes;tcproutes;udproutes,verbs=get;list;watch
 // +kubebuilder:rbac:groups="networking.x-k8s.io",resources=gatewayclasses/status;gateways/status;httproutes/status;backendpolicies/status;tlsroutes/status;tcproutes/status;udproutes/status,verbs=update
 
 // GatewayAPIResources returns a list of Gateway API group/version resources.