From 6ac3f8702eeaa81d3d6d257f419ad8fa59c0b6ec Mon Sep 17 00:00:00 2001 From: Adam Harwayne Date: Thu, 6 Jun 2019 16:44:50 -0700 Subject: [PATCH] Add K8s Services to the addressable resolver role. --- ...200-addressable-resolvers-clusterrole.yaml | 21 ++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/config/200-addressable-resolvers-clusterrole.yaml b/config/200-addressable-resolvers-clusterrole.yaml index 275ee263b38..2a5818e1347 100644 --- a/config/200-addressable-resolvers-clusterrole.yaml +++ b/config/200-addressable-resolvers-clusterrole.yaml @@ -24,7 +24,26 @@ aggregationRule: rules: [] # Rules are automatically filled in by the controller manager. --- - + +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: service-addressable-resolver + labels: + duck.knative.dev/addressable: "true" +# Do not use this role directly. These rules will be added to the "addressable-resolver" role. +rules: +- apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - watch + +--- + kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: