Commit 447b7a37 by gitlawr Committed by Craig Jellick

Update for API group migration

Note: See https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16/ - PSP is introduced in policy apigroup in 1.10, and removed from extensions apigroup in 1.16. - DaemonSet, Deployment, StatefulSet, and ReplicaSet migrate to apps in 1.9, and no longer be served from extensions in 1.16 - Ingress is migrated to networking.k8s.io in 1.14, and will be removed from extensions in 1.18
parent c236666b
......@@ -14,7 +14,7 @@ rules:
- apiGroups: [""]
resources: ["configmaps", "secrets", "events", "services", "pods"]
verbs: ["*"]
- apiGroups: ["extensions"]
- apiGroups: ["extensions", "networking.k8s.io"]
resources: ["ingresses"]
verbs: ["*"]
---
......
......@@ -23,17 +23,17 @@ rules:
- apiGroups: ["rbac.istio.io"]
resources: ["*"]
verbs: ["get", "list", "watch"]
- apiGroups: ["extensions","apps"]
- apiGroups: ["extensions", "apps"]
resources: ["deployments"]
resourceNames: ["istio-galley"]
verbs: ["get"]
- apiGroups: [""]
resources: ["pods", "nodes", "services", "endpoints"]
verbs: ["get", "list", "watch"]
- apiGroups: ["extensions"]
- apiGroups: ["extensions", "networking.k8s.io"]
resources: ["ingresses"]
verbs: ["get", "list", "watch"]
- apiGroups: ["extensions"]
- apiGroups: ["extensions", "apps"]
resources: ["deployments/finalizers"]
resourceNames: ["istio-galley"]
verbs: ["update"]
......@@ -23,7 +23,7 @@ rules:
- apiGroups: ["apiextensions.k8s.io"]
resources: ["customresourcedefinitions"]
verbs: ["*"]
- apiGroups: ["extensions"]
- apiGroups: ["extensions", "networking.k8s.io"]
resources: ["ingresses", "ingresses/status"]
verbs: ["*"]
- apiGroups: [""]
......
......@@ -29,6 +29,7 @@ rules:
- "watch"
- apiGroups:
- "extensions"
- "apps"
resources:
- daemonsets
- deployments
......
{{- if .Values.enabledPSP }}
apiVersion: extensions/v1beta1
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: {{ template "app.fullname" . }}
......
......@@ -62,6 +62,7 @@ metadata:
rules:
- apiGroups:
- extensions
- policy
resourceNames:
- {{ template "app.fullname" . }}
resources:
......
......@@ -29,6 +29,7 @@ rules:
- "get"
- apiGroups:
- "extensions"
- "networking.k8s.io"
verbs:
- "list"
- "watch"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment