support xds auth (#117)

2026-06-09 12:47:28 +08:00 · 2023-01-04 17:52:07 +08:00
parent 79c894373c
commit 4a69d9e605
4 changed files with 25 additions and 0 deletions
--- a/helm/higress/templates/controller-clusterrole.yaml
+++ b/helm/higress/templates/controller-clusterrole.yaml
@@ -45,3 +45,8 @@ rules:
  - apiGroups: [""]
    resources: ["services"]
    verbs: ["get", "watch", "list", "update", "patch", "create", "delete"]
+
+  # Used to verify the JWT tokens
+  - apiGroups: ["authentication.k8s.io"]
+    resources: ["tokenreviews"]
+    verbs: ["create"]