fix envoyproxy#2127

Signed-off-by: Huabing Zhao <[email protected]>
zhaohuabing · Oct 31, 2023 · a3d45ff · a3d45ff
1 parent 179d265
commit a3d45ff
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/charts/gateway-helm/templates/_rbac.tpl b/charts/gateway-helm/templates/_rbac.tpl
@@ -83,6 +83,7 @@ resources:
 - envoypatchpolicies/status
 - clienttrafficpolicies/status
 - backendtrafficpolicies/status
+- securitypolicies/status
 verbs:
 - update
 {{- end }}

diff --git a/charts/gateway-helm/templates/certgen.yaml b/charts/gateway-helm/templates/certgen.yaml
@@ -34,7 +34,7 @@ spec:
         - name: ENVOY_GATEWAY_CERTIFICATE_EXPIRY_DAYS
           value: "{{ .Values.deployment.envoyGateway.cert.expiryDays }}"
         image: {{ .Values.deployment.envoyGateway.image.repository }}:{{ .Values.deployment.envoyGateway.image.tag | default .Chart.AppVersion }}
-        imagePullPolicy: {{ .Values.deployment.envoyGateway.imagePullPolicy }}
+        imagePullPolicy: Never
         name: envoy-gateway-certgen
       restartPolicy: Never
       securityContext:

diff --git a/charts/gateway-helm/templates/envoy-gateway-deployment.yaml b/charts/gateway-helm/templates/envoy-gateway-deployment.yaml
@@ -46,7 +46,7 @@ spec:
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: {{ .Values.kubernetesClusterDomain }}
         image: {{ .Values.deployment.envoyGateway.image.repository }}:{{ .Values.deployment.envoyGateway.image.tag | default .Chart.AppVersion }}
-        imagePullPolicy: {{ .Values.deployment.envoyGateway.imagePullPolicy }}
+        imagePullPolicy: Never
         livenessProbe:
           httpGet:
             path: /healthz