Fix coreDNSCustomConfig values

Signed-off-by: Negash <i@negash.ru>
Globalnet include ClusterRole for services
2026-09-21 04:30:34 +00:00 · 2022-01-05 12:47:35 +00:00 · 2022-01-04 07:48:50 -05:00 · 2021-12-16 07:59:53 -05:00 · 2021-12-14 21:44:22 -05:00 · 2021-12-13 07:44:09 -05:00
4 changed files with 59 additions and 3 deletions
@@ -1 +1,3 @@
+# Auto-generated, do not edit; see CODEOWNERS.in
 * @Oats87 @skitt @sridhargaddam @tpantelis
+*.md @dfarrell07 @Oats87 @skitt @sridhargaddam @tpantelis
@@ -0,0 +1,5 @@
+@dfarrell07 *.md
+@Oats87 *
+@skitt *
+@sridhargaddam *
+@tpantelis *
@@ -439,6 +439,21 @@ rules:
    verbs:
      - get
      - list
+  - apiGroups:
+      - ""
+    resources:
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - monitoring.coreos.com
+    resources:
+      - servicemonitors
+    verbs:
+      - get
+      - create
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -459,6 +474,29 @@ roleRef:
  name: {{ template "submariner.fullname" . }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: submariner-metrics-reader
+  namespace: {{ .Release.Namespace }}
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "services", "endpoints"]
+    verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: read-submariner-metrics
+subjects:
+  - kind: ServiceAccount
+    name: prometheus-k8s
+    namespace: openshift-monitoring
+roleRef:
+  kind: Role
+  name: submariner-metrics-reader
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
  name: {{ template "submariner.fullname" . }}:gateway
@@ -640,14 +678,25 @@ rules:
      - ""
    resources:
      - pods
-      - services
      - namespaces
      - nodes
+      - endpoints
    verbs:
      - get
      - list
      - watch
      - update
+  - apiGroups:
+      - ""
+    resources:
+      - services
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+      - update
+      - delete
  - apiGroups:
      - submariner.io
    resources:
@@ -33,6 +33,6 @@ spec:
    maxPacketLossCount: 5
 {{- with .Values.submariner.coreDNSCustomConfig }}
  coreDNSCustomConfig:
-    configmapName: .configmapName
-    namespace: .namespace
+    configmapName: {{ .configmapName }}
+    namespace: {{ .namespace }}
 {{- end }}
Author	SHA1	Message	Date
NegashandGitHub	9ba0123e72	Fix coreDNSCustomConfig values Signed-off-by: Negash <i@negash.ru>	2022-01-05 12:47:35 +00:00
Sridhar GaddamandThomas Pantelis	b3a5e40a5a	Globalnet include ClusterRole for services As part of Globalnet enhancement where kubeproxy dependency is removed, the Globalnet Pod will now create internal services for every exported service in the respective namespace where the original service resides. This PR adds the necessary clusterRole to allow Globalnet pod to create/delete such internal services. Related to: https://github.com/submariner-io/submariner/issues/1166 Signed-off-by: Sridhar Gaddam <sgaddam@redhat.com>	2022-01-04 07:48:50 -05:00
Stephen KittandThomas Pantelis	9358c86eb5	Add roles and privileges required for monitoring This replicates the RBAC changes applied to the operator in https://github.com/submariner-io/submariner-operator/pull/1416 Fixes: #191 Signed-off-by: Stephen Kitt <skitt@redhat.com>	2021-12-16 07:59:53 -05:00
Masaki KimuraandDaniel Farrell	5da180d44f	Allow submariner-globalnet role to handle endpoints Signed-off-by: Masaki Kimura <masaki.kimura@hitachivantara.com>	2021-12-14 21:44:22 -05:00
Stephen KittandThomas Pantelis	7068abafc8	Add dfarrell07 as *.md code owner See <https://github.com/submariner-io/submariner/issues/1622>. Signed-off-by: Stephen Kitt <skitt@redhat.com>	2021-12-13 07:44:09 -05:00