fix(kgo): add permission for operating BackendTLSPolicy in RBAC res…

…ources (#1230) * add permission for operating backendtlspolicies in KGO * add changelog * Update charts/gateway-operator/CHANGELOG.md --------- Co-authored-by: Patryk Małek <[email protected]>
Kong · Jan 22, 2025 · 5053daf · 5053daf
1 parent 4168a95
commit 5053daf
Show file tree

Hide file tree

Showing 10 changed files with 53 additions and 29 deletions.
diff --git a/charts/gateway-operator/CHANGELOG.md b/charts/gateway-operator/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.4.4
+
+### Changes
+
+- Added permissions to `get/list/watch` `backendtlspolicies` and `update/patch`
+  `backendtlspolicies/status` to enable BackendTLSPolicy controller in KIC.
+  [#1230](https://github.com/Kong/charts/pull/1230)
+
 ## 0.4.3
 
 ### Changes

diff --git a/charts/gateway-operator/Chart.yaml b/charts/gateway-operator/Chart.yaml
@@ -8,7 +8,7 @@ maintainers:
 name: gateway-operator
 sources:
   - https://github.com/Kong/charts/tree/main/charts/gateway-operator
-version: 0.4.3
+version: 0.4.4
 appVersion: "1.4"
 annotations:
   artifacthub.io/prerelease: "false"

diff --git a/charts/gateway-operator/ci/__snapshots__/affinity-values.snap b/charts/gateway-operator/ci/__snapshots__/affinity-values.snap
@@ -346,6 +346,7 @@ rules:
   - tcproutes
   - tlsroutes
   - udproutes
+  - backendtlspolicies
   verbs:
   - get
   - list
@@ -356,6 +357,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - grpcroutes/status
+  - backendtlspolicies/status
   verbs:
   - get
   - patch
@@ -694,7 +696,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     app.kubernetes.io/component: kgo
@@ -716,7 +718,7 @@ spec:
       labels:
         control-plane: controller-manager
         app.kubernetes.io/name: gateway-operator
-        helm.sh/chart: gateway-operator-0.4.3
+        helm.sh/chart: gateway-operator-0.4.4
         app.kubernetes.io/instance: "chartsnap"
         app.kubernetes.io/version: "1.4"
         app.kubernetes.io/component: kgo
@@ -816,7 +818,7 @@ metadata:
   name: ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:
@@ -893,7 +895,7 @@ metadata:
   name: binding-ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:

diff --git a/charts/gateway-operator/ci/__snapshots__/disable-gateway-controller-values.snap b/charts/gateway-operator/ci/__snapshots__/disable-gateway-controller-values.snap
@@ -346,6 +346,7 @@ rules:
   - tcproutes
   - tlsroutes
   - udproutes
+  - backendtlspolicies
   verbs:
   - get
   - list
@@ -356,6 +357,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - grpcroutes/status
+  - backendtlspolicies/status
   verbs:
   - get
   - patch
@@ -694,7 +696,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     app.kubernetes.io/component: kgo
@@ -716,7 +718,7 @@ spec:
       labels:
         control-plane: controller-manager
         app.kubernetes.io/name: gateway-operator
-        helm.sh/chart: gateway-operator-0.4.3
+        helm.sh/chart: gateway-operator-0.4.4
         app.kubernetes.io/instance: "chartsnap"
         app.kubernetes.io/version: "1.4"
         app.kubernetes.io/component: kgo
@@ -808,7 +810,7 @@ metadata:
   name: ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:
@@ -885,7 +887,7 @@ metadata:
   name: binding-ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:

diff --git a/charts/gateway-operator/ci/__snapshots__/env-and-args-values.snap b/charts/gateway-operator/ci/__snapshots__/env-and-args-values.snap
@@ -346,6 +346,7 @@ rules:
   - tcproutes
   - tlsroutes
   - udproutes
+  - backendtlspolicies
   verbs:
   - get
   - list
@@ -356,6 +357,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - grpcroutes/status
+  - backendtlspolicies/status
   verbs:
   - get
   - patch
@@ -694,7 +696,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     app.kubernetes.io/component: kgo
@@ -716,7 +718,7 @@ spec:
       labels:
         control-plane: controller-manager
         app.kubernetes.io/name: gateway-operator
-        helm.sh/chart: gateway-operator-0.4.3
+        helm.sh/chart: gateway-operator-0.4.4
         app.kubernetes.io/instance: "chartsnap"
         app.kubernetes.io/version: "1.4"
         app.kubernetes.io/component: kgo
@@ -808,7 +810,7 @@ metadata:
   name: ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:
@@ -885,7 +887,7 @@ metadata:
   name: binding-ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:

diff --git a/charts/gateway-operator/ci/__snapshots__/env-and-customenv-values.snap b/charts/gateway-operator/ci/__snapshots__/env-and-customenv-values.snap
@@ -346,6 +346,7 @@ rules:
   - tcproutes
   - tlsroutes
   - udproutes
+  - backendtlspolicies
   verbs:
   - get
   - list
@@ -356,6 +357,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - grpcroutes/status
+  - backendtlspolicies/status
   verbs:
   - get
   - patch
@@ -694,7 +696,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     app.kubernetes.io/component: kgo
@@ -716,7 +718,7 @@ spec:
       labels:
         control-plane: controller-manager
         app.kubernetes.io/name: gateway-operator
-        helm.sh/chart: gateway-operator-0.4.3
+        helm.sh/chart: gateway-operator-0.4.4
         app.kubernetes.io/instance: "chartsnap"
         app.kubernetes.io/version: "1.4"
         app.kubernetes.io/component: kgo
@@ -810,7 +812,7 @@ metadata:
   name: ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:
@@ -887,7 +889,7 @@ metadata:
   name: binding-ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:

diff --git a/charts/gateway-operator/ci/__snapshots__/extra-labels-values.snap b/charts/gateway-operator/ci/__snapshots__/extra-labels-values.snap
@@ -346,6 +346,7 @@ rules:
   - tcproutes
   - tlsroutes
   - udproutes
+  - backendtlspolicies
   verbs:
   - get
   - list
@@ -356,6 +357,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - grpcroutes/status
+  - backendtlspolicies/status
   verbs:
   - get
   - patch
@@ -694,7 +696,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     a: "b"
@@ -717,7 +719,7 @@ spec:
       labels:
         control-plane: controller-manager
         app.kubernetes.io/name: gateway-operator
-        helm.sh/chart: gateway-operator-0.4.3
+        helm.sh/chart: gateway-operator-0.4.4
         app.kubernetes.io/instance: "chartsnap"
         app.kubernetes.io/version: "1.4"
         a: "b"
@@ -808,7 +810,7 @@ metadata:
   name: ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     a: "b"
@@ -886,7 +888,7 @@ metadata:
   name: binding-ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     a: "b"

diff --git a/charts/gateway-operator/ci/__snapshots__/probes-and-args-values.snap b/charts/gateway-operator/ci/__snapshots__/probes-and-args-values.snap
@@ -346,6 +346,7 @@ rules:
   - tcproutes
   - tlsroutes
   - udproutes
+  - backendtlspolicies
   verbs:
   - get
   - list
@@ -356,6 +357,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - grpcroutes/status
+  - backendtlspolicies/status
   verbs:
   - get
   - patch
@@ -694,7 +696,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     app.kubernetes.io/component: kgo
@@ -716,7 +718,7 @@ spec:
       labels:
         control-plane: controller-manager
         app.kubernetes.io/name: gateway-operator
-        helm.sh/chart: gateway-operator-0.4.3
+        helm.sh/chart: gateway-operator-0.4.4
         app.kubernetes.io/instance: "chartsnap"
         app.kubernetes.io/version: "1.4"
         app.kubernetes.io/component: kgo
@@ -808,7 +810,7 @@ metadata:
   name: ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:
@@ -885,7 +887,7 @@ metadata:
   name: binding-ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:

diff --git a/charts/gateway-operator/ci/__snapshots__/tolerations-values.snap b/charts/gateway-operator/ci/__snapshots__/tolerations-values.snap
@@ -346,6 +346,7 @@ rules:
   - tcproutes
   - tlsroutes
   - udproutes
+  - backendtlspolicies
   verbs:
   - get
   - list
@@ -356,6 +357,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - grpcroutes/status
+  - backendtlspolicies/status
   verbs:
   - get
   - patch
@@ -694,7 +696,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
     app.kubernetes.io/component: kgo
@@ -716,7 +718,7 @@ spec:
       labels:
         control-plane: controller-manager
         app.kubernetes.io/name: gateway-operator
-        helm.sh/chart: gateway-operator-0.4.3
+        helm.sh/chart: gateway-operator-0.4.4
         app.kubernetes.io/instance: "chartsnap"
         app.kubernetes.io/version: "1.4"
         app.kubernetes.io/component: kgo
@@ -810,7 +812,7 @@ metadata:
   name: ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec:
@@ -887,7 +889,7 @@ metadata:
   name: binding-ports.dataplane.gateway-operator.konghq.com
   labels:
     app.kubernetes.io/name: gateway-operator
-    helm.sh/chart: gateway-operator-0.4.3
+    helm.sh/chart: gateway-operator-0.4.4
     app.kubernetes.io/instance: "chartsnap"
     app.kubernetes.io/version: "1.4"
 spec: