From b13898d6e92d27fa6725083d9d79426090b2b1a0 Mon Sep 17 00:00:00 2001 From: Spencer Hance Date: Thu, 20 Aug 2020 19:16:33 -0700 Subject: [PATCH] Add rbac patch permissions for system:controller:glbc ingresses/status --- cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml b/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml index c14cc17e3f5..8d25daefd6a 100644 --- a/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml +++ b/cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml @@ -43,7 +43,7 @@ rules: verbs: ["update"] - apiGroups: ["extensions", "networking.k8s.io"] resources: ["ingresses/status"] - verbs: ["update"] + verbs: ["update", "patch"] # GLBC ensures that the `cloud.google.com/backendconfigs` CRD exists in a desired state: # https://github.com/kubernetes/ingress-gce/blob/4918eb2f0f484f09ac9e5a975907a9b16ed2b344/cmd/glbc/main.go#L93 # TODO(rramkumar1): https://github.com/kubernetes/ingress-gce/issues/744