[COMMON] Add roles for hazelcast apps

CDS and CPS use hazelcast, which requires additional
resource read permissions (endpoint, service, node)
Added it to roles-wrapper and ServiceAccount templates

Issue-ID: OOM-3250

Change-Id: I8360ba657054b2468df55dc529beedd9fc79bada
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>

diff --git a/kubernetes/common/roles-wrapper/templates/role.yaml b/kubernetes/common/roles-wrapper/templates/role.yaml
index 0be6c7b..3438b6e 100644 (file)
--- a/kubernetes/common/roles-wrapper/templates/role.yaml
+++ b/kubernetes/common/roles-wrapper/templates/role.yaml
@@ -30,6 +30,9 @@ rules:
   - batch
   - extensions
   resources:
+  - endpoints
+  - services
+  - nodes
   - pods
   - deployments
   - deployments/status

diff --git a/kubernetes/common/serviceAccount/templates/role.yaml b/kubernetes/common/serviceAccount/templates/role.yaml
index 1b686f5..83cb945 100644 (file)
--- a/kubernetes/common/serviceAccount/templates/role.yaml
+++ b/kubernetes/common/serviceAccount/templates/role.yaml
@@ -53,6 +53,9 @@ rules:
   - batch
   - extensions
   resources:
+  - endpoints
+  - services
+  - nodes
   - pods
   - deployments
   - deployments/status