@@ -353,26 +353,28 @@ properties:
353353 rules :
354354 # The jetstack secure agent gathers services for pod readiness
355355 # probe rules.
356- - resources : ["services", "pods"]
356+ - apiGroups : [""]
357+ resources : ["services", "pods"]
357358 verbs : ["get", "list"]
358359 # The jetstack secure agent gathers higher level resources to
359360 # ensure data to determine ownership is present.
360- - resources : ["deployments", "daemonsets", "replicasets", "statefulsets "]
361- apiGroups : ["apps "]
361+ - apiGroups : ["apps "]
362+ resources : ["deployments", "daemonsets", "replicasets", "statefulsets "]
362363 verbs : ["get", "list"]
363- - resources : ["jobs", "cronjobs "]
364- apiGroups : ["batch "]
364+ - apiGroups : ["batch "]
365+ resources : ["jobs", "cronjobs "]
365366 verbs : ["get", "list"]
366367 # The jetstack secure agent gathers resources for cert-manager package.
367- - resources : ["secrets"]
368+ - apiGroups : [""]
369+ resources : ["secrets"]
368370 verbs : ["get", "list"]
369- - apiGroups : ["networking.k8s.iobeta1 "]
371+ - apiGroups : ["networking.k8s.io "]
370372 resources : ["ingresses"]
371373 verbs : ["get", "list"]
372374 - apiGroups : ["cert-manager.io"]
373375 resources : ["certificates", "certificaterequests", "issuers", "clusterissuers"]
374376 verbs : ["get", "list"]
375- - apiGroups : ["cas-issuer.jetstack.ioalpha1 "]
377+ - apiGroups : ["cas-issuer.jetstack.io "]
376378 resources : ["googlecasissuers", "googlecasclusterissuers"]
377379 verbs : ["get", "list"]
378380 - apiGroups : ["admissionregistration.k8s.io"]
0 commit comments