fix(cluster-scanner): corrected role to support OKD4

sysdiglabs · Jul 20, 2023 · a0645f7 · a0645f7
1 parent eeab8fe
commit a0645f7
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 6 deletions.
diff --git a/charts/cluster-scanner/Chart.yaml b/charts/cluster-scanner/Chart.yaml
@@ -4,7 +4,7 @@ description: Sysdig Cluster Scanner
 
 type: application
 
-version: 0.3.2
+version: 0.3.3
 
 appVersion: "0.1.0"
 home: https://www.sysdig.com/

diff --git a/charts/cluster-scanner/README.md b/charts/cluster-scanner/README.md
@@ -25,7 +25,7 @@ $ pre-commit run -a
 $ helm repo add sysdig https://charts.sysdig.com
 $ helm repo update
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-      --create-namespace -n sysdig --version=0.3.2  \
+      --create-namespace -n sysdig --version=0.3.3  \
       --set global.clusterConfig.name=CLUSTER_NAME \
       --set global.sysdig.region=SYSDIG_REGION \
       --set global.sysdig.accessKey=YOUR-KEY-HERE
@@ -55,7 +55,7 @@ To install the chart with the release name `cluster-scanner`, run:
 
 ```console
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-       --create-namespace -n sysdig --version=0.3.2 \
+       --create-namespace -n sysdig --version=0.3.3 \
        --set global.clusterConfig.name=CLUSTER_NAME \
        --set global.sysdig.region=SYSDIG_REGION \
        --set global.sysdig.accessKey=YOUR-KEY-HERE
@@ -146,7 +146,7 @@ Specify each parameter using the **`--set key=value[,key=value]`** argument to `
 
 ```console
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-    --create-namespace -n sysdig --version=0.3.2 \
+    --create-namespace -n sysdig --version=0.3.3 \
     --set global.sysdig.region="us1"
 ```
 
@@ -155,7 +155,7 @@ installing the chart. For example:
 
 ```console
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-    --create-namespace -n sysdig --version=0.3.2 \
+    --create-namespace -n sysdig --version=0.3.3 \
     --values values.yaml
 ```
 

diff --git a/charts/cluster-scanner/templates/role.yaml b/charts/cluster-scanner/templates/role.yaml
@@ -21,6 +21,8 @@ rules:
 - apiGroups: ["*"]
   resources:
     - "endpoints"
+    # Following is required for OpenShift. See https://docs.openshift.com/container-platform/3.11/architecture/core_concepts/pods_and_services.html#endpoints
+    - "endpoints/restricted"
   resourceNames:
     - {{ include "cluster-scanner.fullname" . }}
   verbs: ["*"]
diff --git a/charts/cluster-scanner/tests/role_test.yaml b/charts/cluster-scanner/tests/role_test.yaml
@@ -45,6 +45,7 @@ tests:
             apiGroups: ["*"]
             resources:
               - "endpoints"
+              - "endpoints/restricted"
             resourceNames:
               - test-release-cluster-scanner
             verbs: ["*"]

diff --git a/charts/sysdig-deploy/Chart.yaml b/charts/sysdig-deploy/Chart.yaml
@@ -36,7 +36,7 @@ dependencies:
   - name: cluster-scanner
     # repository: https://charts.sysdig.com
     repository: file://../cluster-scanner
-    version: ~0.3.2
+    version: ~0.3.3
     alias: clusterScanner
     condition: clusterScanner.enabled
   - name: kspm-collector