Update for API group migration

Note: See https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16/ - PSP is introduced in policy apigroup in 1.10, and removed from extensions apigroup in 1.16. - DaemonSet, Deployment, StatefulSet, and ReplicaSet migrate to apps in 1.9, and no longer be served from extensions in 1.16 - Ingress is migrated to networking.k8s.io in 1.14, and will be removed from extensions in 1.18

Update for API group migration
447b7a37 · gitlawr · Craig Jellick · c236666b · 447b7a37 · 447b7a37
Commit 447b7a37 authored Sep 06, 2019 by gitlawr Committed by Craig Jellick Sep 10, 2019
7 changed files
--- a/charts/rancher-istio/0.0.2/charts/certmanager/templates/rbac.yaml
+++ b/charts/rancher-istio/0.0.2/charts/certmanager/templates/rbac.yaml
@@ -14,7 +14,7 @@ rules:
  - apiGroups: [""]
    resources: ["configmaps", "secrets", "events", "services", "pods"]
    verbs: ["*"]
-  - apiGroups: ["extensions"]
+  - apiGroups: ["extensions", "networking.k8s.io"]
    resources: ["ingresses"]
    verbs: ["*"]
 ---

--- a/charts/rancher-istio/0.0.2/charts/galley/templates/clusterrole.yaml
+++ b/charts/rancher-istio/0.0.2/charts/galley/templates/clusterrole.yaml
@@ -23,17 +23,17 @@ rules:
 - apiGroups: ["rbac.istio.io"]
  resources: ["*"]
  verbs: ["get", "list", "watch"]
- apiGroups: ["extensions","apps"]
+- apiGroups: ["extensions", "apps"]
  resources: ["deployments"]
  resourceNames: ["istio-galley"]
  verbs: ["get"]
 - apiGroups: [""]
  resources: ["pods", "nodes", "services", "endpoints"]
  verbs: ["get", "list", "watch"]
- apiGroups: ["extensions"]
+- apiGroups: ["extensions", "networking.k8s.io"]
  resources: ["ingresses"]
  verbs: ["get", "list", "watch"]
- apiGroups: ["extensions"]
+- apiGroups: ["extensions", "apps"]
  resources: ["deployments/finalizers"]
  resourceNames: ["istio-galley"]
  verbs: ["update"]
--- a/charts/rancher-istio/0.0.2/charts/pilot/templates/clusterrole.yaml
+++ b/charts/rancher-istio/0.0.2/charts/pilot/templates/clusterrole.yaml
@@ -23,7 +23,7 @@ rules:
 - apiGroups: ["apiextensions.k8s.io"]
  resources: ["customresourcedefinitions"]
  verbs: ["*"]
- apiGroups: ["extensions"]
+- apiGroups: ["extensions", "networking.k8s.io"]
  resources: ["ingresses", "ingresses/status"]
  verbs: ["*"]
 - apiGroups: [""]

--- a/charts/rancher-monitoring/v0.0.4/charts/exporter-kube-state/templates/rbac.yaml
+++ b/charts/rancher-monitoring/v0.0.4/charts/exporter-kube-state/templates/rbac.yaml
@@ -29,6 +29,7 @@ rules:
  - "watch"
 - apiGroups: 
  - "extensions"
+  - "apps"
  resources:
  - daemonsets
  - deployments

--- a/charts/rancher-monitoring/v0.0.4/charts/exporter-node/templates/psp.yaml
+++ b/charts/rancher-monitoring/v0.0.4/charts/exporter-node/templates/psp.yaml
 {{- if .Values.enabledPSP }}
-apiVersion: extensions/v1beta1
+apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
  name: {{ template "app.fullname" . }}

--- a/charts/rancher-monitoring/v0.0.4/charts/exporter-node/templates/rbac.yaml
+++ b/charts/rancher-monitoring/v0.0.4/charts/exporter-node/templates/rbac.yaml
@@ -62,6 +62,7 @@ metadata:
 rules:
 - apiGroups:
  - extensions
+  - policy
  resourceNames:
  - {{ template "app.fullname" . }}
  resources:

--- a/charts/rancher-monitoring/v0.0.4/charts/prometheus/templates/rbac.yaml
+++ b/charts/rancher-monitoring/v0.0.4/charts/prometheus/templates/rbac.yaml
@@ -29,6 +29,7 @@ rules:
  - "get"
 - apiGroups:
  - "extensions"
+  - "networking.k8s.io"
  verbs: 
  - "list"
  - "watch"