Update nginx-ingress-controller image and rbac

mozilla-iam · Dec 19, 2023 · 7f0b0a0 · 7f0b0a0
1 parent bb77812
commit 7f0b0a0
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/k8s/templates/ingress-controller.yaml b/k8s/templates/ingress-controller.yaml
@@ -60,12 +60,20 @@ rules:
     verbs:
       - create
   - apiGroups:
-      - "extensions"
+      - extensions
+      - networking.k8s.io
     resources:
       - ingresses
     verbs:
       - list
       - watch
+  - apiGroups:
+      - discovery.k8s.io
+    resources:
+      - endpointslices
+    verbs:
+      - list
+      - watch
 
 ---
 
@@ -105,7 +113,7 @@ spec:
       serviceAccountName: nginx-ingress-serviceaccount
       containers:
         - name: nginx-ingress-controller
-          image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.24.1
+          image: registry.k8s.io/ingress-nginx/controller:v1.9.4
           args:
             - /nginx-ingress-controller
             - --ingress-class=nginx-{{ .Values.namespace }}
@@ -120,7 +128,7 @@ spec:
                 add:
                 - NET_BIND_SERVICE
             # www-data -> 33
-            runAsUser: 33
+            runAsUser: 101
           env:
             - name: POD_NAME
               valueFrom: