Skip to content

Commit 37d1566

Browse files
authored
fix: Allow RBAC for endpoints to the standard chart (#1619)
# Description Adds RBAC to allow querying `endpoints` in the standard chart. Fixes errors introduced by #1573 for failures to query for `endpoints` when the legacy control plane is deployed. ## Checklist - [X] I have read the [contributing documentation](https://retina.sh/docs/Contributing/overview). - [X] I signed and signed-off the commits (`git commit -S -s ...`). See [this documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification) on signing commits. - [X] I have correctly attributed the author(s) of the code. - [X] I have tested the changes locally. - [X] I have followed the project's style guidelines. - [X] I have updated the documentation, if necessary. - [X] I have added tests, if applicable. ## Screenshots (if applicable) or Testing Completed Deployed with new version of the chart, no longer receive errors like ``` retina ts=2025-05-20T20:23:52.758Z level=error caller=apiserver/apiserver.go:120 msg="failed to initialize new cache" error="failed to retrieve ips from kubernetes endpoint: retrieving kubernetes endpoint: endpoints \"kubernetes\" is forbidden retina ts=2025-05-20T20:23:52.758Z level=error caller=watchermanager/watchermanager.go:76 msg="refresh failed" error="failed to retrieve ips from kubernetes endpoint: retrieving kubernetes endpoint: endpoints \"kubernetes\" is forbidden ``` --- Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more information on how to contribute to this project. Signed-off-by: Matthew McKeen <[email protected]>
1 parent 664f12f commit 37d1566

File tree

1 file changed

+2
-1
lines changed
  • deploy/standard/manifests/controller/helm/retina/templates

1 file changed

+2
-1
lines changed

deploy/standard/manifests/controller/helm/retina/templates/rbac.yaml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ metadata:
99
name: retina-cluster-reader
1010
rules:
1111
- apiGroups: [""] # "" indicates the core API group
12-
resources: ["pods", "services", "replicationcontrollers", "nodes", "namespaces"]
12+
resources: ["endpoints", "pods", "services", "replicationcontrollers", "nodes", "namespaces"]
1313
verbs: ["get", "watch", "list"]
1414
- apiGroups: ["apps"]
1515
resources: ["deployments", "replicasets"]
@@ -30,6 +30,7 @@ rules:
3030
- ""
3131
resources:
3232
- namespaces
33+
- endpoints
3334
verbs:
3435
- get
3536
- list

0 commit comments

Comments
 (0)