Adding endpoint slices permission to Cluster Role (#487)

Paramadon · web-flow · commit 02eaa877eb23 · 2025-03-24T11:25:33.000-04:00
diff --git a/terraform/eks/daemon/app_signals/main.tf b/terraform/eks/daemon/app_signals/main.tf
@@ -478,6 +478,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     resources      = ["configmaps"]
     api_groups     = [""]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/awsneuron/main.tf b/terraform/eks/daemon/awsneuron/main.tf
@@ -790,6 +790,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     non_resource_urls = ["/metrics"]
     verbs             = ["get", "list", "watch"]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/efa/main.tf b/terraform/eks/daemon/efa/main.tf
@@ -489,6 +489,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     non_resource_urls = ["/metrics"]
     verbs             = ["get", "list", "watch"]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/emf/main.tf b/terraform/eks/daemon/emf/main.tf
@@ -444,6 +444,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     resources      = ["configmaps"]
     api_groups     = [""]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/fluent/common/main.tf b/terraform/eks/daemon/fluent/common/main.tf
@@ -210,6 +210,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     resources      = ["configmaps"]
     api_groups     = [""]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/fluent/windows/main.tf b/terraform/eks/daemon/fluent/windows/main.tf
@@ -297,6 +297,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     resources      = ["configmaps"]
     api_groups     = [""]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/gpu/main.tf b/terraform/eks/daemon/gpu/main.tf
@@ -683,6 +683,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     non_resource_urls = ["/metrics"]
     verbs             = ["get", "list", "watch"]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/main.tf b/terraform/eks/daemon/main.tf
@@ -389,6 +389,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     resources      = ["configmaps"]
     api_groups     = [""]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/statsd/main.tf b/terraform/eks/daemon/statsd/main.tf
@@ -438,6 +438,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     resources      = ["configmaps"]
     api_groups     = [""]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/daemon/windows/main.tf b/terraform/eks/daemon/windows/main.tf
@@ -523,6 +523,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     resources      = ["configmaps"]
     api_groups     = [""]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {
diff --git a/terraform/eks/deployment/main.tf b/terraform/eks/deployment/main.tf
@@ -380,6 +380,11 @@ resource "kubernetes_cluster_role" "clusterrole" {
     verbs             = ["get"]
     non_resource_urls = ["/metrics"]
   }
+  rule {
+    verbs      = ["list", "watch", "get"]
+    resources  = ["endpointslices"]
+    api_groups = ["discovery.k8s.io"]
+  }
 }
 
 resource "kubernetes_cluster_role_binding" "rolebinding" {

Original file line number	Diff line number	Diff line change
`@@ -478,6 +478,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`478`	`478`	`resources = ["configmaps"]`
`479`	`479`	`api_groups = [""]`
`480`	`480`	`}`
	`481`	`+ rule {`
	`482`	`+ verbs = ["list", "watch", "get"]`
	`483`	`+ resources = ["endpointslices"]`
	`484`	`+ api_groups = ["discovery.k8s.io"]`
	`485`	`+ }`
`481`	`486`	`}`
`482`	`487`
`483`	`488`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -790,6 +790,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`790`	`790`	`non_resource_urls = ["/metrics"]`
`791`	`791`	`verbs = ["get", "list", "watch"]`
`792`	`792`	`}`
	`793`	`+ rule {`
	`794`	`+ verbs = ["list", "watch", "get"]`
	`795`	`+ resources = ["endpointslices"]`
	`796`	`+ api_groups = ["discovery.k8s.io"]`
	`797`	`+ }`
`793`	`798`	`}`
`794`	`799`
`795`	`800`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -489,6 +489,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`489`	`489`	`non_resource_urls = ["/metrics"]`
`490`	`490`	`verbs = ["get", "list", "watch"]`
`491`	`491`	`}`
	`492`	`+ rule {`
	`493`	`+ verbs = ["list", "watch", "get"]`
	`494`	`+ resources = ["endpointslices"]`
	`495`	`+ api_groups = ["discovery.k8s.io"]`
	`496`	`+ }`
`492`	`497`	`}`
`493`	`498`
`494`	`499`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -444,6 +444,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`444`	`444`	`resources = ["configmaps"]`
`445`	`445`	`api_groups = [""]`
`446`	`446`	`}`
	`447`	`+ rule {`
	`448`	`+ verbs = ["list", "watch", "get"]`
	`449`	`+ resources = ["endpointslices"]`
	`450`	`+ api_groups = ["discovery.k8s.io"]`
	`451`	`+ }`
`447`	`452`	`}`
`448`	`453`
`449`	`454`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -210,6 +210,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`210`	`210`	`resources = ["configmaps"]`
`211`	`211`	`api_groups = [""]`
`212`	`212`	`}`
	`213`	`+ rule {`
	`214`	`+ verbs = ["list", "watch", "get"]`
	`215`	`+ resources = ["endpointslices"]`
	`216`	`+ api_groups = ["discovery.k8s.io"]`
	`217`	`+ }`
`213`	`218`	`}`
`214`	`219`
`215`	`220`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -297,6 +297,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`297`	`297`	`resources = ["configmaps"]`
`298`	`298`	`api_groups = [""]`
`299`	`299`	`}`
	`300`	`+ rule {`
	`301`	`+ verbs = ["list", "watch", "get"]`
	`302`	`+ resources = ["endpointslices"]`
	`303`	`+ api_groups = ["discovery.k8s.io"]`
	`304`	`+ }`
`300`	`305`	`}`
`301`	`306`
`302`	`307`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -683,6 +683,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`683`	`683`	`non_resource_urls = ["/metrics"]`
`684`	`684`	`verbs = ["get", "list", "watch"]`
`685`	`685`	`}`
	`686`	`+ rule {`
	`687`	`+ verbs = ["list", "watch", "get"]`
	`688`	`+ resources = ["endpointslices"]`
	`689`	`+ api_groups = ["discovery.k8s.io"]`
	`690`	`+ }`
`686`	`691`	`}`
`687`	`692`
`688`	`693`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -389,6 +389,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`389`	`389`	`resources = ["configmaps"]`
`390`	`390`	`api_groups = [""]`
`391`	`391`	`}`
	`392`	`+ rule {`
	`393`	`+ verbs = ["list", "watch", "get"]`
	`394`	`+ resources = ["endpointslices"]`
	`395`	`+ api_groups = ["discovery.k8s.io"]`
	`396`	`+ }`
`392`	`397`	`}`
`393`	`398`
`394`	`399`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -438,6 +438,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`438`	`438`	`resources = ["configmaps"]`
`439`	`439`	`api_groups = [""]`
`440`	`440`	`}`
	`441`	`+ rule {`
	`442`	`+ verbs = ["list", "watch", "get"]`
	`443`	`+ resources = ["endpointslices"]`
	`444`	`+ api_groups = ["discovery.k8s.io"]`
	`445`	`+ }`
`441`	`446`	`}`
`442`	`447`
`443`	`448`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`
Original file line number	Diff line number	Diff line change
`@@ -523,6 +523,11 @@ resource "kubernetes_cluster_role" "clusterrole" {`
`523`	`523`	`resources = ["configmaps"]`
`524`	`524`	`api_groups = [""]`
`525`	`525`	`}`
	`526`	`+ rule {`
	`527`	`+ verbs = ["list", "watch", "get"]`
	`528`	`+ resources = ["endpointslices"]`
	`529`	`+ api_groups = ["discovery.k8s.io"]`
	`530`	`+ }`
`526`	`531`	`}`
`527`	`532`
`528`	`533`	`resource "kubernetes_cluster_role_binding" "rolebinding" {`