Adding roles needed for testing routing policy

istio-ecosystem · Jul 14, 2022 · 2af86fb · 2af86fb
1 parent e7a5bde
commit 2af86fb
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 1 deletion.
diff --git a/install/admiral/base/role_bindings.yaml b/install/admiral/base/role_bindings.yaml
@@ -44,4 +44,19 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: admiral
-    namespace: admiral
+    namespace: admiral
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: admiral-cluster-binding
+  namespace: istio-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: admiral-sync-write-envoyfilters
+subjects:
+  - kind: ServiceAccount
+    name: admiral
+    namespace: istio-system
diff --git a/install/admiral/base/roles.yaml b/install/admiral/base/roles.yaml
@@ -33,3 +33,15 @@ rules:
   - apiGroups: [""]
     resources: ["configmaps"]
     verbs: ["get", "update", "create"]
+
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: admiral-sync-write-envoyfilters
+  namespace: admiral
+rules:
+  - apiGroups: ["networking.istio.io"]
+    resources: ['envoyfilters']
+    verbs: ["create", "update", "delete"]