From 1954770672cf7b3692661538c7cb08234a27d8e0 Mon Sep 17 00:00:00 2001
From: Vishal Thapar <5137689+vthapar@users.noreply.github.com>
Date: Mon, 20 Jul 2020 20:09:59 +0530
Subject: [PATCH] Allow lighthouse access to gateways.submariner.io

Adds following permissions to lighthouse clusterrole
for `gateways.submariner.io`
 - get
 - list
 - watch

This allows lighthouse to track changes to gateway status and know which
clusters are connected.

Signed-off-by: Vishal Thapar <5137689+vthapar@users.noreply.github.com>
---
 submariner/templates/rbac.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/submariner/templates/rbac.yaml b/submariner/templates/rbac.yaml
index 165f146..684bb38 100644
--- a/submariner/templates/rbac.yaml
+++ b/submariner/templates/rbac.yaml
@@ -123,6 +123,9 @@ rules:
   - apiGroups: ["lighthouse.submariner.io"]
     resources: ["*"]
     verbs: ["create", "get", "list", "watch", "update", "delete"]
+  - apiGroups: ["submariner.io"]
+    resources: ["gateways"]
+    verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding