add rbac to read ingressclassparams (kubernetes-sigs#1977)

M00nF1sh · Timothy-Dougherty · commit 7476f83b4881 · 2023-11-09T11:28:40.000+11:00
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -77,6 +77,14 @@ rules:
   verbs:
   - patch
   - update
+- apiGroups:
+  - elbv2.k8s.aws
+  resources:
+  - ingressclassparams
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - elbv2.k8s.aws
   resources:
diff --git a/controllers/ingress/group_controller.go b/controllers/ingress/group_controller.go
@@ -89,6 +89,7 @@ type groupReconciler struct {
 	maxConcurrentReconciles int
 }
 
+// +kubebuilder:rbac:groups=elbv2.k8s.aws,resources=ingressclassparams,verbs=get;list;watch
 // +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch;update;patch
 // +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses/status,verbs=update;patch
 // +kubebuilder:rbac:groups=networking.k8s.io,resources=ingressclasses,verbs=get;list;watch

Original file line number	Diff line number	Diff line change
`@@ -89,6 +89,7 @@ type groupReconciler struct {`
`89`	`89`	`maxConcurrentReconciles int`
`90`	`90`	`}`
`91`	`91`
	`92`	`+// +kubebuilder:rbac:groups=elbv2.k8s.aws,resources=ingressclassparams,verbs=get;list;watch`
`92`	`93`	`// +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch;update;patch`
`93`	`94`	`// +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses/status,verbs=update;patch`
`94`	`95`	`// +kubebuilder:rbac:groups=networking.k8s.io,resources=ingressclasses,verbs=get;list;watch`