Add serviceaccount list to network-admin and user-ui (#3687)

* Add serviceaccount list to network-admin and user-ui * Fix dirty felixconfigurations.yaml
tigera · Jan 10, 2025 · c792fcc · c792fcc
1 parent 24c6261
commit c792fcc
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/pkg/render/apiserver.go b/pkg/render/apiserver.go
@@ -1663,6 +1663,12 @@ func (c *apiServerComponent) tigeraUserClusterRole() *rbacv1.ClusterRole {
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		// Additional "list" requests required to view serviceaccount labels.
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		// Access to statistics.
 		{
 			APIGroups: []string{""},
@@ -1847,6 +1853,12 @@ func (c *apiServerComponent) tigeraNetworkAdminClusterRole() *rbacv1.ClusterRole
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		// Additional "list" requests required to view serviceaccount labels.
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		// Access to statistics.
 		{
 			APIGroups: []string{""},

diff --git a/pkg/render/apiserver_test.go b/pkg/render/apiserver_test.go
@@ -1323,6 +1323,11 @@ var (
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		{
 			APIGroups: []string{""},
 			Resources: []string{"services/proxy"},
@@ -1467,6 +1472,11 @@ var (
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		{
 			APIGroups: []string{""},
 			Resources: []string{"services/proxy"},