Ref #35096: add services permission to shinyproxy

Author: LEDfan

docs/deployment/bases/clustered/resources/shinyproxy-operator.rbac.yaml

@@ -38,9 +38,6 @@ rules:
   - apiGroups: [ "extensions" ]
     resources: [ "replicasets" ]
     verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]
-  - apiGroups: [ "zalando.org" ]
-    resources: [ "routegroups" ]
-    verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1

docs/deployment/bases/shinyproxy/resources/shinyproxy.rbac.yaml

@@ -15,6 +15,9 @@ rules:
   - apiGroups: [ "" ]
     resources: [ "events" ]
     verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1

docs/deployment/overlays/3-namespaced-app-ns/my-namespace/resources/shinyproxy-apps-role-my-ns.rbac.yaml

@@ -10,6 +10,9 @@ rules:
   - apiGroups: [ "" ]
     resources: [ "events" ]
     verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1