From 80dcf2b014d11fb57edf385d21982093f7854384 Mon Sep 17 00:00:00 2001
From: yyzxw <1020938856@qq.com>
Date: Thu, 7 Dec 2023 17:23:58 +0800
Subject: [PATCH] feat: add rollout plugin contour rbac

Signed-off-by: xiaowu.zhu <xiaowu.zhu@daocloud.io>
---
 charts/argo-rollouts/Chart.yaml                      |  4 ++--
 charts/argo-rollouts/README.md                       |  1 +
 .../templates/controller/clusterrole.yaml            | 12 ++++++++++++
 charts/argo-rollouts/values.yaml                     |  2 ++
 4 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/charts/argo-rollouts/Chart.yaml b/charts/argo-rollouts/Chart.yaml
index 933cc9d34..09b46332a 100644
--- a/charts/argo-rollouts/Chart.yaml
+++ b/charts/argo-rollouts/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: v1.6.2
 description: A Helm chart for Argo Rollouts
 name: argo-rollouts
-version: 2.32.5
+version: 2.32.6
 home: https://github.com/argoproj/argo-helm
 icon: https://argoproj.github.io/argo-rollouts/assets/logo.png
 keywords:
@@ -19,4 +19,4 @@ annotations:
     url: https://argoproj.github.io/argo-helm/pgp_keys.asc
   artifacthub.io/changes: |
     - kind: changed
-      description: Upgrade Argo Rollouts CRDs to match them mainstream from v1.6.2
+      description: Add Contour plugin RBAC.
diff --git a/charts/argo-rollouts/README.md b/charts/argo-rollouts/README.md
index b91989988..e74afaca6 100644
--- a/charts/argo-rollouts/README.md
+++ b/charts/argo-rollouts/README.md
@@ -65,6 +65,7 @@ For full list of changes please check ArtifactHub [changelog].
 | providerRBAC.providers.apisix | bool | `true` | Adds RBAC rules for the Apisix provider |
 | providerRBAC.providers.awsAppMesh | bool | `true` | Adds RBAC rules for the AWS App Mesh provider |
 | providerRBAC.providers.awsLoadBalancerController | bool | `true` | Adds RBAC rules for the AWS Load Balancer Controller provider |
+| providerRBAC.providers.contour | bool | `true` | Adds RBAC rules for the Contour provider, see `https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-contour/blob/main/README.md` |
 | providerRBAC.providers.istio | bool | `true` | Adds RBAC rules for the Istio provider |
 | providerRBAC.providers.smi | bool | `true` | Adds RBAC rules for the SMI provider |
 | providerRBAC.providers.traefik | bool | `true` | Adds RBAC rules for the Traefik provider |
diff --git a/charts/argo-rollouts/templates/controller/clusterrole.yaml b/charts/argo-rollouts/templates/controller/clusterrole.yaml
index ab0f7ee15..56afb5cb9 100644
--- a/charts/argo-rollouts/templates/controller/clusterrole.yaml
+++ b/charts/argo-rollouts/templates/controller/clusterrole.yaml
@@ -255,5 +255,17 @@ rules:
   - get
   - update
 {{- end }}
+{{- if .Values.providerRBAC.providers.contour }}
+  # Access needed when using the Contour provider
+- apiGroups:
+    - projectcontour.io
+  resources:
+    - httpproxies
+  verbs:
+    - get
+    - list
+    - watch
+    - update
+{{- end }}
 {{- end }}
 {{- end }}
diff --git a/charts/argo-rollouts/values.yaml b/charts/argo-rollouts/values.yaml
index b711ee37d..34c5a286f 100644
--- a/charts/argo-rollouts/values.yaml
+++ b/charts/argo-rollouts/values.yaml
@@ -262,6 +262,8 @@ providerRBAC:
     traefik: true
     # -- Adds RBAC rules for the Apisix provider
     apisix: true
+    # -- Adds RBAC rules for the Contour provider, see `https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-contour/blob/main/README.md`
+    contour: true
 
 dashboard:
   # -- Deploy dashboard server