Fix rbac cluster role

Signed-off-by: Michael Kriese <michael.kriese@gmx.de>

Author: viceice

charts/kube-vip/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.7.1
+version: 0.8.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/kube-vip/templates/pod-monitor.yaml

@@ -18,4 +18,4 @@ spec:
       {{- include "kube-vip.selectorLabels" . | nindent 6 }}
   podMetricsEndpoints:
   - port: monitoring
-{{- end }}
+{{- end }}

charts/kube-vip/templates/rbac.yaml

@@ -14,11 +14,23 @@ metadata:
   name: {{ include "kube-vip.name" . }}
 rules:
   - apiGroups: [""]
-    resources: ["services", "services/status", "nodes", "endpoints", "pods"]
-    verbs: ["list","get","watch", "update"]
+    resources: ["services/status"]
+    verbs: ["update"]
+  - apiGroups: [""]
+    resources: ["services", "endpoints"]
+    verbs: ["list", "get", "watch", "update"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["list", "get", "watch", "update", "patch"]
   - apiGroups: ["coordination.k8s.io"]
     resources: ["leases"]
     verbs: ["list", "get", "watch", "update", "create"]
+  - apiGroups: ["discovery.k8s.io"]
+    resources: ["endpointslices"]
+    verbs: ["list", "get", "watch", "update"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["list"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

charts/kube-vip/values.yaml

@@ -133,4 +133,4 @@ podMonitor:
   labels: {}
   annotations: {}
 
-priorityClassName: ""
+priorityClassName: ""