add RBAC fix to namespaces - get, watch, list to each gateway-*route

kubernetes-sigs · Jan 25, 2024 · b747584 · b747584
1 parent 8dd49cc
commit b747584
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/charts/external-dns/templates/clusterrole.yaml b/charts/external-dns/templates/clusterrole.yaml
@@ -59,17 +59,15 @@ rules:
   - apiGroups: ["gateway.networking.k8s.io"]
     resources: ["gateways"]
     verbs: ["get","watch","list"]
+  - apiGroups: [""]
+    resources: ["namespaces"]
+    verbs: ["get","watch","list"]    
 {{- end }}
 {{- if has "gateway-httproute" .Values.sources }}
   - apiGroups: ["gateway.networking.k8s.io"]
     resources: ["httproutes"]
     verbs: ["get","watch","list"]
 {{- end }}
-{{- if has "gateway-httproute" .Values.sources }}
-  - apiGroups: [""]
-    resources: ["namespaces"]
-    verbs: ["get","watch","list"]
-{{- end }}
 {{- if has "gateway-grpcroute" .Values.sources }}
   - apiGroups: ["gateway.networking.k8s.io"]
     resources: ["grpcroutes"]