File tree Expand file tree Collapse file tree 10 files changed +307
-234
lines changed
addons/apigatewayv2-chart Expand file tree Collapse file tree 10 files changed +307
-234
lines changed Original file line number Diff line number Diff line change 11apiVersion : v1
22name : apigatewayv2-chart
33description : A Helm chart for the ACK service controller for Amazon API Gateway (APIGWv2)
4- version : 1.0.7
5- appVersion : 1.0.7
4+ version : 1.0.8
5+ appVersion : 1.0.8
66home : https://github.com/aws-controllers-k8s/apigatewayv2-controller
77icon : https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
88sources :
Original file line number Diff line number Diff line change @@ -161,10 +161,10 @@ spec:
161161 description : ' Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
162162 type : string
163163 name :
164- description : ' Name of the referent. More info: http ://kubernetes.io/docs/user-guide/identifiers #names'
164+ description : ' Name of the referent. More info: https ://kubernetes.io/docs/concepts/overview/working-with-objects/names #names'
165165 type : string
166166 uid :
167- description : ' UID of the referent. More info: http ://kubernetes.io/docs/user-guide/identifiers #uids'
167+ description : ' UID of the referent. More info: https ://kubernetes.io/docs/concepts/overview/working-with-objects/names #uids'
168168 type : string
169169 required :
170170 - apiVersion
Original file line number Diff line number Diff line change 11{{ .Chart.Name }} has been installed.
2- This chart deploys "public.ecr.aws/aws-controllers-k8s/apigatewayv2-controller:1.0.7 ".
2+ This chart deploys "public.ecr.aws/aws-controllers-k8s/apigatewayv2-controller:1.0.8 ".
33
44Check its status by running:
55 kubectl --namespace {{ .Release.Namespace }} get pods -l "app.kubernetes.io/instance={{ .Release.Name }}"
Original file line number Diff line number Diff line change @@ -46,3 +46,214 @@ If release name contains chart name it will be used as a full name.
4646{ {- define " aws.credentials.path" -} }
4747{ {- printf " %s/%s" (include " aws.credentials.secret_mount_path" .) .Values.aws.credentials.secretKey -} }
4848{ {- end -} }
49+
50+ { {/* The rules a of ClusterRole or Role */} }
51+ { {- define " controller-role-rules" } }
52+ rules:
53+ - apiGroups:
54+ - ""
55+ resources:
56+ - configmaps
57+ verbs:
58+ - get
59+ - list
60+ - patch
61+ - watch
62+ - apiGroups:
63+ - ""
64+ resources:
65+ - namespaces
66+ verbs:
67+ - get
68+ - list
69+ - watch
70+ - apiGroups:
71+ - ""
72+ resources:
73+ - secrets
74+ verbs:
75+ - get
76+ - list
77+ - patch
78+ - watch
79+ - apiGroups:
80+ - apigatewayv2.services.k8s.aws
81+ resources:
82+ - apis
83+ verbs:
84+ - create
85+ - delete
86+ - get
87+ - list
88+ - patch
89+ - update
90+ - watch
91+ - apiGroups:
92+ - apigatewayv2.services.k8s.aws
93+ resources:
94+ - apis/status
95+ verbs:
96+ - get
97+ - patch
98+ - update
99+ - apiGroups:
100+ - apigatewayv2.services.k8s.aws
101+ resources:
102+ - authorizers
103+ verbs:
104+ - create
105+ - delete
106+ - get
107+ - list
108+ - patch
109+ - update
110+ - watch
111+ - apiGroups:
112+ - apigatewayv2.services.k8s.aws
113+ resources:
114+ - authorizers/status
115+ verbs:
116+ - get
117+ - patch
118+ - update
119+ - apiGroups:
120+ - apigatewayv2.services.k8s.aws
121+ resources:
122+ - deployments
123+ verbs:
124+ - create
125+ - delete
126+ - get
127+ - list
128+ - patch
129+ - update
130+ - watch
131+ - apiGroups:
132+ - apigatewayv2.services.k8s.aws
133+ resources:
134+ - deployments/status
135+ verbs:
136+ - get
137+ - patch
138+ - update
139+ - apiGroups:
140+ - apigatewayv2.services.k8s.aws
141+ resources:
142+ - integrations
143+ verbs:
144+ - create
145+ - delete
146+ - get
147+ - list
148+ - patch
149+ - update
150+ - watch
151+ - apiGroups:
152+ - apigatewayv2.services.k8s.aws
153+ resources:
154+ - integrations/status
155+ verbs:
156+ - get
157+ - patch
158+ - update
159+ - apiGroups:
160+ - apigatewayv2.services.k8s.aws
161+ resources:
162+ - routes
163+ verbs:
164+ - create
165+ - delete
166+ - get
167+ - list
168+ - patch
169+ - update
170+ - watch
171+ - apiGroups:
172+ - apigatewayv2.services.k8s.aws
173+ resources:
174+ - routes/status
175+ verbs:
176+ - get
177+ - patch
178+ - update
179+ - apiGroups:
180+ - apigatewayv2.services.k8s.aws
181+ resources:
182+ - stages
183+ verbs:
184+ - create
185+ - delete
186+ - get
187+ - list
188+ - patch
189+ - update
190+ - watch
191+ - apiGroups:
192+ - apigatewayv2.services.k8s.aws
193+ resources:
194+ - stages/status
195+ verbs:
196+ - get
197+ - patch
198+ - update
199+ - apiGroups:
200+ - apigatewayv2.services.k8s.aws
201+ resources:
202+ - vpclinks
203+ verbs:
204+ - create
205+ - delete
206+ - get
207+ - list
208+ - patch
209+ - update
210+ - watch
211+ - apiGroups:
212+ - apigatewayv2.services.k8s.aws
213+ resources:
214+ - vpclinks/status
215+ verbs:
216+ - get
217+ - patch
218+ - update
219+ - apiGroups:
220+ - services.k8s.aws
221+ resources:
222+ - adoptedresources
223+ verbs:
224+ - create
225+ - delete
226+ - get
227+ - list
228+ - patch
229+ - update
230+ - watch
231+ - apiGroups:
232+ - services.k8s.aws
233+ resources:
234+ - adoptedresources/status
235+ verbs:
236+ - get
237+ - patch
238+ - update
239+ - apiGroups:
240+ - services.k8s.aws
241+ resources:
242+ - fieldexports
243+ verbs:
244+ - create
245+ - delete
246+ - get
247+ - list
248+ - patch
249+ - update
250+ - watch
251+ - apiGroups:
252+ - services.k8s.aws
253+ resources:
254+ - fieldexports/status
255+ verbs:
256+ - get
257+ - patch
258+ - update
259+ { {- end } }
Original file line number Diff line number Diff line change 1+ apiVersion : rbac.authorization.k8s.io/v1
2+ kind : ClusterRoleBinding
3+ metadata :
4+ name : ack-namespaces-cache-apigatewayv2-controller
5+ roleRef :
6+ kind : ClusterRole
7+ apiGroup : rbac.authorization.k8s.io
8+ name : ack-namespaces-cache-apigatewayv2-controller
9+ subjects :
10+ - kind : ServiceAccount
11+ name : ack-apigatewayv2-controller
12+ namespace : {{ .Release.Namespace }}
13+ ---
14+ apiVersion : rbac.authorization.k8s.io/v1
15+ kind : RoleBinding
16+ metadata :
17+ name : ack-configmaps-cache-apigatewayv2-controller
18+ namespace : {{ .Release.Namespace }}
19+ roleRef :
20+ kind : Role
21+ apiGroup : rbac.authorization.k8s.io
22+ name : ack-configmaps-cache-apigatewayv2-controller
23+ subjects :
24+ - kind : ServiceAccount
25+ name : ack-apigatewayv2-controller
26+ namespace : {{ .Release.Namespace }}
Original file line number Diff line number Diff line change 1+ apiVersion : rbac.authorization.k8s.io/v1
2+ kind : ClusterRole
3+ metadata :
4+ name : ack-namespaces-cache-apigatewayv2-controller
5+ rules :
6+ - apiGroups :
7+ - " "
8+ resources :
9+ - namespaces
10+ verbs :
11+ - get
12+ - list
13+ - watch
14+ ---
15+ apiVersion : rbac.authorization.k8s.io/v1
16+ kind : Role
17+ metadata :
18+ name : ack-configmaps-cache-apigatewayv2-controller
19+ namespace : {{ .Release.Namespace }}
20+ rules :
21+ - apiGroups :
22+ - " "
23+ resources :
24+ - configmaps
25+ verbs :
26+ - get
27+ - list
28+ - watch
Original file line number Diff line number Diff line change 1- apiVersion : rbac.authorization.k8s.io/v1
21{{ if eq .Values.installScope "cluster" }}
2+ apiVersion : rbac.authorization.k8s.io/v1
33kind : ClusterRoleBinding
44metadata :
55 name : {{ include "app.fullname" . }}
66roleRef :
77 kind : ClusterRole
8- {{ else }}
8+ apiGroup : rbac.authorization.k8s.io
9+ name : ack-apigatewayv2-controller
10+ subjects :
11+ - kind : ServiceAccount
12+ name : {{ include "service-account.name" . }}
13+ namespace : {{ .Release.Namespace }}
14+ {{ else if .Values.watchNamespace }}
15+ {{ $namespaces := split "," .Values.watchNamespace }}
16+ {{ $fullname := include "app.fullname" . }}
17+ {{ $releaseNamespace := .Release.Namespace }}
18+ {{ $serviceAccountName := include "service-account.name" . }}
19+ {{ range $namespaces }}
20+ ---
21+ apiVersion : rbac.authorization.k8s.io/v1
922kind : RoleBinding
1023metadata :
11- name : {{ include "app. fullname" . }}
12- namespace : {{ .Release.Namespace }}
24+ name : {{ $ fullname }}
25+ namespace : {{ . }}
1326roleRef :
1427 kind : Role
15- {{ end }}
1628 apiGroup : rbac.authorization.k8s.io
1729 name : ack-apigatewayv2-controller
1830subjects :
1931- kind : ServiceAccount
20- name : {{ include "service-account.name" . }}
21- namespace : {{ .Release.Namespace }}
32+ name : {{ $serviceAccountName }}
33+ namespace : {{ $releaseNamespace }}
34+ {{ end }}
35+ {{ end }}
You can’t perform that action at this time.
0 commit comments