support watching endpointslices for peers

Author: ecordell

config/rbac/role.yaml

@@ -74,6 +74,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - discovery.k8s.io
+  resources:
+  - endpointslices
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - policy
   resources:

pkg/config/config.go

@@ -520,6 +520,10 @@ func (c *Config) unpatchedRole() *applyrbacv1.RoleApplyConfiguration {
 				WithAPIGroups("").
 				WithResources("endpoints").
 				WithVerbs("get", "list", "watch"),
+			applyrbacv1.PolicyRule().
+				WithAPIGroups("discovery.k8s.io").
+				WithResources("endpointslices").
+				WithVerbs("get", "list", "watch"),
 		)
 }
 

pkg/config/config_test.go

@@ -2514,6 +2514,10 @@ metadata:
 						WithAPIGroups("").
 						WithResources("endpoints").
 						WithVerbs("get", "list", "watch"),
+					applyrbacv1.PolicyRule().
+						WithAPIGroups("discovery.k8s.io").
+						WithResources("endpointslices").
+						WithVerbs("get", "list", "watch"),
 				),
 		},
 	}

pkg/controller/controller.go

@@ -67,6 +67,7 @@ import (
 // +kubebuilder:rbac:groups="",resources=serviceaccounts,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups="",resources=services,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups="",resources=endpoints,verbs=get;list;watch
+// +kubebuilder:rbac:groups=discovery.k8s.io,resources=endpointslices,verbs=get;list;watch
 // +kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=roles,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=rolebindings,verbs=get;list;watch;create;update;patch;delete