diff --git a/netbox/controller-rbac.yaml b/netbox/controller-rbac.yaml index 844d2cc..c3a54db 100644 --- a/netbox/controller-rbac.yaml +++ b/netbox/controller-rbac.yaml @@ -1,26 +1,22 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: netbox-ip-controller + namespace: netbox --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: netbox-ip-controller rules: - - apiGroups: - - netbox.digitalocean.com - resources: - - netboxips - verbs: - - "*" - - apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - verbs: - - "*" - - apiGroups: - - "" - resources: - - services - - pods + - apiGroups: ["netbox.digitalocean.com"] + resources: ["netboxips"] + verbs: ["*"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["*"] + - apiGroups: [""] + resources: ["services", "pods"] verbs: ["get", "list", "watch"] --- apiVersion: rbac.authorization.k8s.io/v1 @@ -34,4 +30,4 @@ roleRef: subjects: - kind: ServiceAccount name: netbox-ip-controller - namespace: default + namespace: netbox \ No newline at end of file diff --git a/netbox/controller.yaml b/netbox/controller.yaml index 93ffbbd..24c9ad4 100644 --- a/netbox/controller.yaml +++ b/netbox/controller.yaml @@ -18,7 +18,8 @@ spec: - name: controller image: digitalocean/netbox-ip-controller:v0.4.2 args: - - --netbox-api-url=https://netbox.apps.undercloud.dev + args: + - --netbox-api-url=https://netbox.apps.undercloud.dev/api - --netbox-token=$(NETBOX_TOKEN) - --dual-stack-ip=true - --service-publish-labels=netbox-export