Allow API Gateway controller to get Namespaces (hashicorp#1092)

* Allow API Gateway controller to get Namespaces * Add CHANGELOG entry * Update CHANGELOG.md Co-authored-by: Kyle Schochenmaier <[email protected]> Co-authored-by: Kyle Schochenmaier <[email protected]>
linydquantil · Mar 10, 2022 · abe9b40 · abe9b40
1 parent d246a8c
commit abe9b40
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,8 @@ BREAKING CHANGES:
 IMPROVEMENTS:
 * Control Plane
   * Upgrade Docker image Alpine version from 3.14 to 3.15. [[GH-1058](https://github.com/hashicorp/consul-k8s/pull/1058)]
+* Helm
+  * API Gateway: Allow controller to read Kubernetes namespaces in order to determine if route is allowed for gateway. [[GH-1092](https://github.com/hashicorp/consul-k8s/pull/1092)]
 
 ## 0.41.1 (February 24, 2022)
 

diff --git a/charts/consul/templates/api-gateway-controller-clusterrole.yaml b/charts/consul/templates/api-gateway-controller-clusterrole.yaml
@@ -72,6 +72,14 @@ rules:
   verbs:
   - create
   - patch
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - ""
   resources: