Skip to content

Commit 2fa6b27

Browse files
authored
chore: adds 'watch' verb into inference pool reader cluster role (#1477)
**Description** In #1377, we dropped a few verbs from the RBAC for EG to read inference pools. Although the tests have been passing, EG was emitting errors saying the 'watch' verb was missing in its role. > Failed to watch {"runner": "provider", "reflector": "pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:290", "type": "inference.networking.k8s.io/v1, Kind=InferencePool", "error": "inferencepools.inference.networking.k8s.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot watch resource "inferencepools" in API group "inference.networking.k8s.io" at the cluster scope"} So this commit brings it back to the generated ClusterRole. **Related Issues/PRs (if applicable)** Closes #1472 Signed-off-by: Takeshi Yoneda <[email protected]>
1 parent fe2ac5c commit 2fa6b27

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

manifests/charts/ai-gateway-helm/templates/envoy_gateway_cluster_role_for_inference_pool.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ rules:
1919
verbs:
2020
- "get"
2121
- "list"
22+
- "watch"
2223
---
2324
apiVersion: rbac.authorization.k8s.io/v1
2425
kind: ClusterRoleBinding

0 commit comments

Comments
 (0)