|
@ -35,6 +35,9 @@ rules: |
|
|
- endpoints |
|
|
- endpoints |
|
|
# to check apiserver connectivity |
|
|
# to check apiserver connectivity |
|
|
- namespaces |
|
|
- namespaces |
|
|
|
|
|
{% if cilium_version | regex_replace('v') is version('1.7', '<') %} |
|
|
|
|
|
- componentstatuses |
|
|
|
|
|
{% endif %} |
|
|
verbs: |
|
|
verbs: |
|
|
- get |
|
|
- get |
|
|
- list |
|
|
- list |
|
@ -48,10 +51,12 @@ rules: |
|
|
- ciliumclusterwidenetworkpolicies/status |
|
|
- ciliumclusterwidenetworkpolicies/status |
|
|
- ciliumendpoints |
|
|
- ciliumendpoints |
|
|
- ciliumendpoints/status |
|
|
- ciliumendpoints/status |
|
|
|
|
|
{% if cilium_version | regex_replace('v') is version('1.6', '>=') %} |
|
|
- ciliumnodes |
|
|
- ciliumnodes |
|
|
- ciliumnodes/status |
|
|
- ciliumnodes/status |
|
|
- ciliumidentities |
|
|
- ciliumidentities |
|
|
- ciliumidentities/status |
|
|
- ciliumidentities/status |
|
|
|
|
|
{% endif %} |
|
|
verbs: |
|
|
verbs: |
|
|
- '*' |
|
|
- '*' |
|
|
--- |
|
|
--- |
|
@ -63,6 +68,9 @@ rules: |
|
|
- apiGroups: |
|
|
- apiGroups: |
|
|
- networking.k8s.io |
|
|
- networking.k8s.io |
|
|
resources: |
|
|
resources: |
|
|
|
|
|
{% if cilium_version | regex_replace('v') is version('1.7', '<') %} |
|
|
|
|
|
- ingresses |
|
|
|
|
|
{% endif %} |
|
|
- networkpolicies |
|
|
- networkpolicies |
|
|
verbs: |
|
|
verbs: |
|
|
- get |
|
|
- get |
|
@ -83,10 +91,24 @@ rules: |
|
|
- services |
|
|
- services |
|
|
- nodes |
|
|
- nodes |
|
|
- endpoints |
|
|
- endpoints |
|
|
|
|
|
{% if cilium_version | regex_replace('v') is version('1.7', '<') %} |
|
|
|
|
|
- componentstatuses |
|
|
|
|
|
{% endif %} |
|
|
verbs: |
|
|
verbs: |
|
|
- get |
|
|
- get |
|
|
- list |
|
|
- list |
|
|
- watch |
|
|
- watch |
|
|
|
|
|
{% if cilium_version | regex_replace('v') is version('1.7', '<') %} |
|
|
|
|
|
- apiGroups: |
|
|
|
|
|
- extensions |
|
|
|
|
|
resources: |
|
|
|
|
|
- ingresses |
|
|
|
|
|
verbs: |
|
|
|
|
|
- create |
|
|
|
|
|
- get |
|
|
|
|
|
- list |
|
|
|
|
|
- watch |
|
|
|
|
|
{% endif %} |
|
|
- apiGroups: |
|
|
- apiGroups: |
|
|
- "" |
|
|
- "" |
|
|
resources: |
|
|
resources: |
|
@ -119,13 +141,17 @@ rules: |
|
|
resources: |
|
|
resources: |
|
|
- ciliumnetworkpolicies |
|
|
- ciliumnetworkpolicies |
|
|
- ciliumnetworkpolicies/status |
|
|
- ciliumnetworkpolicies/status |
|
|
|
|
|
{% if cilium_version | regex_replace('v') is version('1.7', '>=') %} |
|
|
- ciliumclusterwidenetworkpolicies |
|
|
- ciliumclusterwidenetworkpolicies |
|
|
- ciliumclusterwidenetworkpolicies/status |
|
|
- ciliumclusterwidenetworkpolicies/status |
|
|
|
|
|
{% endif %} |
|
|
- ciliumendpoints |
|
|
- ciliumendpoints |
|
|
- ciliumendpoints/status |
|
|
- ciliumendpoints/status |
|
|
|
|
|
{% if cilium_version | regex_replace('v') is version('1.6', '>=') %} |
|
|
- ciliumnodes |
|
|
- ciliumnodes |
|
|
- ciliumnodes/status |
|
|
- ciliumnodes/status |
|
|
- ciliumidentities |
|
|
- ciliumidentities |
|
|
- ciliumidentities/status |
|
|
- ciliumidentities/status |
|
|
|
|
|
{% endif %} |
|
|
verbs: |
|
|
verbs: |
|
|
- '*' |
|
|
- '*' |