Merge pull request #1129 from spencerhance/cp-1128-1-9

Cherry-pick #1128 to release-1.9 [Add rbac permissions for networking.gke.io/frontendconfigs]
kubernetes · Jun 3, 2020 · 831c13f · 831c13f
2 parents f8e7778 + 8568a10
commit 831c13f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/docs/deploy/resources/rbac.yaml b/docs/deploy/resources/rbac.yaml
@@ -74,6 +74,11 @@ rules:
 - apiGroups: ["cloud.google.com"]
   resources: ["backendconfigs"]
   verbs: ["get", "list", "watch", "update", "create", "patch"]
+# GLBC ensures that the `networking.gke.io/frontendconfigs` CRD exists and reconciles the configuration
+# https://github.com/kubernetes/ingress-gce/blob/v1.9.4/cmd/glbc/main.go#L118
+- apiGroups: ["networking.gke.io"]
+  resources: ["frontendconfigs"]
+  verbs: ["get", "list", "watch", "update", "create", "patch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/hack/update-codegen.sh b/hack/update-codegen.sh
@@ -14,6 +14,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# **NOTE** When adding new CRDs. Make sure to include the new rbac permissions in docs/deploy/resources/rbac.yaml
+
 set -o errexit
 set -o nounset
 set -o pipefail