From 822bcb4bb6fb2c9e14892da2cfd37e4b4e8125df Mon Sep 17 00:00:00 2001 From: Andreas Geissler Date: Fri, 8 Dec 2023 08:48:20 +0100 Subject: [PATCH] [COMMON] Add roles for hazelcast apps CDS and CPS use hazelcast, which requires additional resource read permissions (endpoint, service, node) Added it to roles-wrapper and ServiceAccount templates Issue-ID: OOM-3250 Change-Id: I8360ba657054b2468df55dc529beedd9fc79bada Signed-off-by: Andreas Geissler --- kubernetes/common/roles-wrapper/templates/role.yaml | 3 +++ kubernetes/common/serviceAccount/templates/role.yaml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/kubernetes/common/roles-wrapper/templates/role.yaml b/kubernetes/common/roles-wrapper/templates/role.yaml index 0be6c7bbd6..3438b6e36e 100644 --- a/kubernetes/common/roles-wrapper/templates/role.yaml +++ b/kubernetes/common/roles-wrapper/templates/role.yaml @@ -30,6 +30,9 @@ rules: - batch - extensions resources: + - endpoints + - services + - nodes - pods - deployments - deployments/status diff --git a/kubernetes/common/serviceAccount/templates/role.yaml b/kubernetes/common/serviceAccount/templates/role.yaml index 1b686f521c..83cb945ba9 100644 --- a/kubernetes/common/serviceAccount/templates/role.yaml +++ b/kubernetes/common/serviceAccount/templates/role.yaml @@ -53,6 +53,9 @@ rules: - batch - extensions resources: + - endpoints + - services + - nodes - pods - deployments - deployments/status -- 2.16.6