From 962dbbba481d6d299d0ae9530d3552092f1cf227 Mon Sep 17 00:00:00 2001 From: Antonio Ojea Date: Fri, 11 Nov 2022 16:23:17 +0000 Subject: [PATCH] fix glbc jobs use latest stable version add permissions for endpointslices --- cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml | 4 ++++ cluster/gce/manifests/glbc.manifest | 3 ++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml b/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml index c58bac4295c..dc44681a88d 100644 --- a/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml +++ b/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml @@ -67,3 +67,7 @@ rules: - apiGroups: ["coordination.k8s.io"] resources: ["leases"] verbs: ["get","create","update"] + # GLBC uses endpoint slices +- apiGroups: ["discovery.k8s.io"] + resources: ["endpointslices"] + verbs: ["get","list", "watch"] diff --git a/cluster/gce/manifests/glbc.manifest b/cluster/gce/manifests/glbc.manifest index 60cd0ee8305..e4525e27abc 100644 --- a/cluster/gce/manifests/glbc.manifest +++ b/cluster/gce/manifests/glbc.manifest @@ -15,7 +15,7 @@ spec: terminationGracePeriodSeconds: 600 hostNetwork: true containers: - - image: gcr.io/k8s-ingress-image-push/ingress-gce-glbc-amd64:v1.12.0 + - image: gcr.io/k8s-ingress-image-push/ingress-gce-glbc-amd64:v1.20.1 livenessProbe: httpGet: path: /healthz @@ -56,6 +56,7 @@ spec: - --running-in-cluster=false - --config-file-path=/etc/gce.conf - --healthz-port=8086 + - --enable-endpoint-slices - --gce-ratelimit=ga.Operations.Get,qps,10,100 - --gce-ratelimit=alpha.Operations.Get,qps,10,100 - --gce-ratelimit=beta.Operations.Get,qps,10,100