Fix RBAC to allow watching for AP UDS changes

Dean-Coakley · web-flow · commit 890ed6799345 · 2021-03-08T14:15:52.000Z
diff --git a/pkg/controller/nginxingresscontroller/rbac.go b/pkg/controller/nginxingresscontroller/rbac.go
@@ -60,7 +60,7 @@ func clusterRoleForNginxIngressController(name string) *rbacv1.ClusterRole {
 		{
 			Verbs:     []string{"get", "list", "watch"},
 			APIGroups: []string{"appprotect.f5.com"},
-			Resources: []string{"aplogconfs", "appolicies"},
+			Resources: []string{"aplogconfs", "appolicies", "apusersigs"},
 		},
 	}
 	return &rbacv1.ClusterRole{
diff --git a/pkg/controller/nginxingresscontroller/rbac_test.go b/pkg/controller/nginxingresscontroller/rbac_test.go
@@ -68,7 +68,7 @@ func TestClusterRoleForNginxIngressController(t *testing.T) {
 			{
 				Verbs:     []string{"get", "list", "watch"},
 				APIGroups: []string{"appprotect.f5.com"},
-				Resources: []string{"aplogconfs", "appolicies"},
+				Resources: []string{"aplogconfs", "appolicies", "apusersigs"},
 			},
 		},
 	}

Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,7 @@ func clusterRoleForNginxIngressController(name string) *rbacv1.ClusterRole {`
`60`	`60`	`{`
`61`	`61`	`Verbs: []string{"get", "list", "watch"},`
`62`	`62`	`APIGroups: []string{"appprotect.f5.com"},`
`63`		`- Resources: []string{"aplogconfs", "appolicies"},`
	`63`	`+ Resources: []string{"aplogconfs", "appolicies", "apusersigs"},`
`64`	`64`	`},`
`65`	`65`	`}`
`66`	`66`	`return &rbacv1.ClusterRole{`
Original file line number	Diff line number	Diff line change
`@@ -68,7 +68,7 @@ func TestClusterRoleForNginxIngressController(t *testing.T) {`
`68`	`68`	`{`
`69`	`69`	`Verbs: []string{"get", "list", "watch"},`
`70`	`70`	`APIGroups: []string{"appprotect.f5.com"},`
`71`		`- Resources: []string{"aplogconfs", "appolicies"},`
	`71`	`+ Resources: []string{"aplogconfs", "appolicies", "apusersigs"},`
`72`	`72`	`},`
`73`	`73`	`},`
`74`	`74`	`}`