diff --git a/assets/csidriveroperators/aws-ebs/base/05_clusterrole.yaml b/assets/csidriveroperators/aws-ebs/base/05_clusterrole.yaml index e4f2a8073..9c6d9d2f4 100644 --- a/assets/csidriveroperators/aws-ebs/base/05_clusterrole.yaml +++ b/assets/csidriveroperators/aws-ebs/base/05_clusterrole.yaml @@ -288,6 +288,15 @@ rules: - get - list - watch +# Allow Prometheus to discover endpoints via EndpointSlices +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch # Allow kube-rbac-proxy to create TokenReview to be able to authenticate Prometheus when collecting metrics - apiGroups: - authentication.k8s.io diff --git a/assets/csidriveroperators/aws-ebs/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/aws-ebs/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml index bd58ad1e2..03c4a8378 100644 --- a/assets/csidriveroperators/aws-ebs/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/aws-ebs/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml @@ -285,6 +285,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/aws-ebs/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/aws-ebs/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml index bd58ad1e2..03c4a8378 100644 --- a/assets/csidriveroperators/aws-ebs/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/aws-ebs/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_aws-ebs-csi-driver-operator-clusterrole.yaml @@ -285,6 +285,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/azure-disk/base/06_clusterrole.yaml b/assets/csidriveroperators/azure-disk/base/06_clusterrole.yaml index 7139ee9f9..6d73f48a4 100644 --- a/assets/csidriveroperators/azure-disk/base/06_clusterrole.yaml +++ b/assets/csidriveroperators/azure-disk/base/06_clusterrole.yaml @@ -288,6 +288,15 @@ rules: - get - list - watch +# Allow Prometheus to discover endpoints via EndpointSlices +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch # Allow kube-rbac-proxy to create TokenReview to be able to authenticate Prometheus when collecting metrics - apiGroups: - authentication.k8s.io diff --git a/assets/csidriveroperators/azure-disk/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/azure-disk/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml index 7e81009d3..3da564abc 100644 --- a/assets/csidriveroperators/azure-disk/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/azure-disk/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml @@ -285,6 +285,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/azure-disk/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/azure-disk/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml index 7e81009d3..3da564abc 100644 --- a/assets/csidriveroperators/azure-disk/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/azure-disk/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-disk-csi-driver-operator-clusterrole.yaml @@ -285,6 +285,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/azure-file/base/06_clusterrole.yaml b/assets/csidriveroperators/azure-file/base/06_clusterrole.yaml index e6bb2d867..beffd12ff 100644 --- a/assets/csidriveroperators/azure-file/base/06_clusterrole.yaml +++ b/assets/csidriveroperators/azure-file/base/06_clusterrole.yaml @@ -292,6 +292,15 @@ rules: - get - list - watch +# Allow Prometheus to discover endpoints via EndpointSlices +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch # Allow kube-rbac-proxy to create TokenReview to be able to authenticate Prometheus when collecting metrics - apiGroups: - authentication.k8s.io diff --git a/assets/csidriveroperators/azure-file/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/azure-file/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml index 50115a5de..fba94291c 100644 --- a/assets/csidriveroperators/azure-file/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/azure-file/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml @@ -289,6 +289,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/azure-file/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/azure-file/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml index 50115a5de..fba94291c 100644 --- a/assets/csidriveroperators/azure-file/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/azure-file/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_azure-file-csi-driver-operator-clusterrole.yaml @@ -289,6 +289,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/openstack-cinder/base/05_clusterrole.yaml b/assets/csidriveroperators/openstack-cinder/base/05_clusterrole.yaml index 3d964b267..f4c46ef86 100644 --- a/assets/csidriveroperators/openstack-cinder/base/05_clusterrole.yaml +++ b/assets/csidriveroperators/openstack-cinder/base/05_clusterrole.yaml @@ -263,6 +263,15 @@ rules: - update - patch - delete +# Allow Prometheus to discover endpoints via EndpointSlices +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch # Allow kube-rbac-proxy to create TokenReview to be able to authenticate Prometheus when collecting metrics - apiGroups: - "authentication.k8s.io" diff --git a/assets/csidriveroperators/openstack-cinder/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/openstack-cinder/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml index 0ca08a36a..d508b9fd7 100644 --- a/assets/csidriveroperators/openstack-cinder/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/openstack-cinder/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml @@ -258,6 +258,14 @@ rules: - update - patch - delete +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/openstack-cinder/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/openstack-cinder/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml index 0ca08a36a..d508b9fd7 100644 --- a/assets/csidriveroperators/openstack-cinder/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/openstack-cinder/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_openstack-cinder-csi-driver-operator-clusterrole.yaml @@ -258,6 +258,14 @@ rules: - update - patch - delete +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - authentication.k8s.io resources: diff --git a/assets/csidriveroperators/openstack-manila/base/05_clusterrole.yaml b/assets/csidriveroperators/openstack-manila/base/05_clusterrole.yaml index f485f14ae..f60870967 100644 --- a/assets/csidriveroperators/openstack-manila/base/05_clusterrole.yaml +++ b/assets/csidriveroperators/openstack-manila/base/05_clusterrole.yaml @@ -315,6 +315,14 @@ rules: - 'get' - 'list' - 'watch' +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - policy resources: diff --git a/assets/csidriveroperators/openstack-manila/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/openstack-manila/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml index bba4af69f..eef8115d9 100644 --- a/assets/csidriveroperators/openstack-manila/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/openstack-manila/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml @@ -305,6 +305,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - policy resources: diff --git a/assets/csidriveroperators/openstack-manila/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml b/assets/csidriveroperators/openstack-manila/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml index bba4af69f..eef8115d9 100644 --- a/assets/csidriveroperators/openstack-manila/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml +++ b/assets/csidriveroperators/openstack-manila/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml @@ -305,6 +305,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch - apiGroups: - policy resources: