Added traefik-proxy rules to helm chart (#3325)

* Added traefik-proxy rules to helm chart * Added new Traefik api group to chart Signed-off-by: Thomas Kosiewski <[email protected]> * Added changelog entry Signed-off-by: Thomas Kosiewski <[email protected]> --------- Signed-off-by: Thomas Kosiewski <[email protected]> Signed-off-by: Thomas Kosiewski <[email protected]>
kubernetes-sigs · Jun 28, 2023 · 440f513 · 440f513
1 parent d25ba9f
commit 440f513
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/charts/external-dns/CHANGELOG.md b/charts/external-dns/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### All Changes
 
 - Disallowed privilege escalation in container security context and set the seccomp profile type to `RuntimeDefault`. ([#3689](https://github.com/kubernetes-sigs/external-dns/pull/3689)) [@nrvnrvn](https://github.com/nrvnrvn)
+- Added RBAC for Traefik to ClusterRole. ([#3325](https://github.com/kubernetes-sigs/external-dns/pull/3325)) [@ThomasK33](https://github.com/thomask33)
 
 ## [v1.13.0] - 2023-03-30
 

diff --git a/charts/external-dns/templates/clusterrole.yaml b/charts/external-dns/templates/clusterrole.yaml
@@ -105,6 +105,11 @@ rules:
     resources: ["tcpingresses"]
     verbs: ["get","watch","list"]
 {{- end }}
+{{- if has "traefik-proxy" .Values.sources }}
+  - apiGroups: ["traefik.containo.us", "traefik.io"]
+    resources: ["ingressroutes", "ingressroutetcps", "ingressrouteudps"]
+    verbs: ["get","watch","list"]
+{{- end }}
 {{- if has "openshift-route" .Values.sources }}
   - apiGroups: ["route.openshift.io"]
     resources: ["routes"]