Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[bitnami/metallb] Add missing rule to controller role #16992

Merged
merged 1 commit into from
Jun 7, 2023
Merged

[bitnami/metallb] Add missing rule to controller role #16992

merged 1 commit into from
Jun 7, 2023

Conversation

brenix
Copy link
Contributor

@brenix brenix commented Jun 1, 2023

Description of the change

The clusterrole in the bitnami chart does not match some of the rbac rules from the upstream sources. This change adds a missing rule for listing nodes in the cluster as per the
upstream configuration

This should fix errors like this:

BGPAdvertisement/kube-system/default dry-run failed, reason: Forbidden: admission webhook "bgpadvertisementvalidationwebhook.metallb.io" denied the request: nodes is forbidden: User "system:serviceaccount:kube-system:metallb-controller" cannot list resource "nodes" in API group "" at the cluster scope

Benefits

Allows helm chart upgrades to succeed

Possible drawbacks

Helm chart fails to upgrade

Applicable issues

  • fixes #

Additional information

Checklist

  • Chart version bumped in Chart.yaml according to semver. This is not necessary when the changes only affect README.md files.
  • Title of the pull request follows this pattern [bitnami/<name_of_the_chart>] Descriptive title
  • All commits signed off and in agreement of Developer Certificate of Origin (DCO)

Sorry, something went wrong.

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
The clusterrole in the bitnami chart does not match some of the rbac
rules from the upstream sources. This change adds a missing rule for
listing nodes in the cluster as per the
[upstream](https://github.com/metallb/metallb/blob/e708fc9010afb80c379bdfadd5d543931164ca5e/config/rbac/role.yaml#L17-L22)
configuration

Signed-off-by: Paul Nicholson <brenix@gmail.com>
@github-actions github-actions bot added metallb triage Triage is needed labels Jun 1, 2023
@bitnami-bot bitnami-bot requested a review from javsalgar June 1, 2023 20:45
@carrodher carrodher added the verify Execute verification workflow for these changes label Jun 2, 2023
@github-actions github-actions bot added in-progress and removed triage Triage is needed labels Jun 2, 2023
@bitnami-bot bitnami-bot removed the request for review from javsalgar June 2, 2023 07:33
@bitnami-bot bitnami-bot requested a review from fmulero June 2, 2023 07:33
Copy link
Collaborator

@fmulero fmulero left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch!! Thank you so much @brenix. LGTM

@fmulero fmulero merged commit bbc3a6d into bitnami:main Jun 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
metallb solved verify Execute verification workflow for these changes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants