Add serviceaccount list to network-admin and user-ui (tigera#3687)

* Add serviceaccount list to network-admin and user-ui * Fix dirty felixconfigurations.yaml
ti-afra · Jan 14, 2025 · 1011972 · 1011972
1 parent 214d606
commit 1011972
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/pkg/render/apiserver.go b/pkg/render/apiserver.go
@@ -1661,6 +1661,12 @@ func (c *apiServerComponent) tigeraUserClusterRole() *rbacv1.ClusterRole {
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		// Additional "list" requests required to view serviceaccount labels.
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		// Access to statistics.
 		{
 			APIGroups: []string{""},
@@ -1845,6 +1851,12 @@ func (c *apiServerComponent) tigeraNetworkAdminClusterRole() *rbacv1.ClusterRole
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		// Additional "list" requests required to view serviceaccount labels.
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		// Access to statistics.
 		{
 			APIGroups: []string{""},

diff --git a/pkg/render/apiserver_test.go b/pkg/render/apiserver_test.go
@@ -1314,6 +1314,11 @@ var (
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		{
 			APIGroups: []string{""},
 			Resources: []string{"services/proxy"},
@@ -1458,6 +1463,11 @@ var (
 			Resources: []string{"pods"},
 			Verbs:     []string{"list"},
 		},
+		{
+			APIGroups: []string{""},
+			Resources: []string{"serviceaccounts"},
+			Verbs:     []string{"list"},
+		},
 		{
 			APIGroups: []string{""},
 			Resources: []string{"services/proxy"},