perm: ci manages traefik custom resources

Reviewed-on: #2
2022-05-27 15:09:49 +00:00
parent b8d35e54ac 601a72e1c6
commit 5c0ed41b84
1 changed files with 16 additions and 0 deletions
--- a/ci.tf
+++ b/ci.tf
@@ -100,4 +100,20 @@ resource "kubernetes_cluster_role" "ci_cd" {
    ]
    verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
  }
+
+  rule {
+    api_groups = ["traefik.containo.us"]
+    resources = [
+      "ingressroutes",
+      "ingressroutetcps",
+      "ingressrouteudps",
+      "middlewares",
+      "middlewaretcps",
+      "serverstransports",
+      "tlsoptions",
+      "tlsstores",
+      "traefikservices",
+    ]
+    verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
+  }
 }