Merge pull request #99965 from swetharepakula/glbc-rbac

Add GLBC roles for IngressClass & GCPIngressParams

cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml

@@ -47,6 +47,8 @@ rules:
 # GLBC ensures that the `cloud.google.com/backendconfigs` and `networking.gke.io/servicenetworkendpointgroups` CRD exists in a desired state:
 # https://github.com/kubernetes/ingress-gce/blob/5c3fcb5845e74b92ea8bd52929b15fc5c9fa7970/cmd/glbc/main.go#L108
 # https://github.com/kubernetes/ingress-gce/blob/5c3fcb5845e74b92ea8bd52929b15fc5c9fa7970/cmd/glbc/main.go#L133
+# GLBC creates and updates `networking.gke.io/GCPIngressParams`
+# https://github.com/kubernetes/ingress-gce/blob/7f0928629c85e7a54c6af9e6e490ac89d057461a/cmd/glbc/main.go#L151-L162
 # TODO(rramkumar1): https://github.com/kubernetes/ingress-gce/issues/744
 - apiGroups: ["apiextensions.k8s.io"]
   resources: ["customresourcedefinitions"]
@@ -55,5 +57,9 @@ rules:
   resources: ["backendconfigs"]
   verbs: ["get", "list", "watch", "update", "create", "patch"]
 - apiGroups: ["networking.gke.io"]
-  resources: ["servicenetworkendpointgroups"]
+  resources: ["servicenetworkendpointgroups","gcpingressparams"]
+  verbs: ["get", "list", "watch", "update", "create", "patch"]
+# GLBC creates and updates `networking.k8s.io/IngressClass`
+- apiGroups: ["networking.k8s.io"]
+  resources: ["ingressclasses"]
   verbs: ["get", "list", "watch", "update", "create", "patch"]