fix: rbac

Signed-off-by: Lin Yang <[email protected]>
flomesh-io · Jan 13, 2025 · 85d5c7b · 85d5c7b
1 parent 1501bd8
commit 85d5c7b
Showing 1 changed file with 48 additions and 3 deletions.
diff --git a/charts/fsm/templates/fsm-rbac.yaml b/charts/fsm/templates/fsm-rbac.yaml
@@ -161,13 +161,58 @@ rules:
 
   # GatewayAPI Extension
   - apiGroups: [ "extension.gateway.flomesh.io" ]
-    resources: [ "filters", "filterdefinitions", "listenerfilters", "circuitbreakers", "faultinjections", "ratelimits", "httplogs", "metrics", "zipkins", "filterconfigs", "proxytags" ]
+    resources:
+      - "filters"
+      - "filterdefinitions"
+      - "listenerfilters"
+      - "circuitbreakers"
+      - "faultinjections"
+      - "ratelimits"
+      - "httplogs"
+      - "metrics"
+      - "zipkins"
+      - "filterconfigs"
+      - "proxytags"
+      - "iprestrictions"
+      - "externalratelimits"
+      - "concurrencylimits"
+      - "requestterminations"
     verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]
   - apiGroups: [ "extension.gateway.flomesh.io" ]
-    resources: [ "filters/finalizers", "filterdefinitions/finalizers", "listenerfilters/finalizers", "circuitbreakers/finalizers", "faultinjections/finalizers", "ratelimits/finalizers", "httplogs/finalizers", "metrics/finalizers", "zipkins/finalizers", "filterconfigs/finalizers", "proxytags/finalizers" ]
+    resources:
+      - "filters/finalizers"
+      - "filterdefinitions/finalizers"
+      - "listenerfilters/finalizers"
+      - "circuitbreakers/finalizers"
+      - "faultinjections/finalizers"
+      - "ratelimits/finalizers"
+      - "httplogs/finalizers"
+      - "metrics/finalizers"
+      - "zipkins/finalizers"
+      - "filterconfigs/finalizers"
+      - "proxytags/finalizers"
+      - "iprestrictions/finalizers"
+      - "externalratelimits/finalizers"
+      - "concurrencylimits/finalizers"
+      - "requestterminations/finalizers"
     verbs: [ "update" ]
   - apiGroups: [ "extension.gateway.flomesh.io" ]
-    resources: [ "filters/status", "filterdefinitions/status", "listenerfilters/status", "circuitbreakers/status", "faultinjections/status", "ratelimits/status", "httplogs/status", "metrics/status", "zipkins/status", "filterconfigs/status", "proxytags/status" ]
+    resources:
+      - "filters/status"
+      - "filterdefinitions/status"
+      - "listenerfilters/status"
+      - "circuitbreakers/status"
+      - "faultinjections/status"
+      - "ratelimits/status"
+      - "httplogs/status"
+      - "metrics/status"
+      - "zipkins/status"
+      - "filterconfigs/status"
+      - "proxytags/status"
+      - "iprestrictions/status"
+      - "externalratelimits/status"
+      - "concurrencylimits/status"
+      - "requestterminations/status"
     verbs: [ "get", "patch", "update" ]
 
   # PolicyAttachment