From 89906aa5469c5570d328472402e94629982fae5c Mon Sep 17 00:00:00 2001 From: Thomas Arrow Date: Wed, 12 Nov 2025 20:42:36 +0000 Subject: [PATCH] api 0.34.0 ServiceAccount role to add reading services This enables the role that is given to the default api service account to read services. This is necessary for a feature to determine the correct image to use by selecting it from a pod behind a given service. Bug: T408624 --- charts/api/CHANGELOG.md | 3 +++ charts/api/Chart.yaml | 2 +- charts/api/templates/role-defaultrole.yaml | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/charts/api/CHANGELOG.md b/charts/api/CHANGELOG.md index 32eb85d..7f9fd65 100644 --- a/charts/api/CHANGELOG.md +++ b/charts/api/CHANGELOG.md @@ -2,6 +2,9 @@ This chart does not yet follow SemVer. +## 0.34.0 +- Extend permissions for Kubernetes ServiceAccount role to add reading services + ## 0.33.0 - Add configuration values for complaint form email sender and recipient diff --git a/charts/api/Chart.yaml b/charts/api/Chart.yaml index c6e253f..119d6ff 100644 --- a/charts/api/Chart.yaml +++ b/charts/api/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v1 appVersion: "1.0" description: A Helm chart for the WBStack API name: api -version: 0.33.0 +version: 0.34.0 home: https://github.com/wbstack maintainers: - name: WBstack diff --git a/charts/api/templates/role-defaultrole.yaml b/charts/api/templates/role-defaultrole.yaml index 13603cc..83cc345 100644 --- a/charts/api/templates/role-defaultrole.yaml +++ b/charts/api/templates/role-defaultrole.yaml @@ -9,7 +9,7 @@ rules: resources: ["ingresses"] verbs: ["get", "create", "list"] - apiGroups: [""] - resources: ["pods"] + resources: ["pods", "services"] verbs: ["get", "list", "watch"] - apiGroups: ["batch"] resources: ["jobs"]