From e46c48f492723a5a25bd304465c92ff1ca7fce7f Mon Sep 17 00:00:00 2001
From: Andrew Haines <andrew@haines.org.nz>
Date: Wed, 25 Aug 2021 15:13:56 +0100
Subject: [PATCH] Add Istio permissions to cluster role

---
 charts/external-dns/Chart.yaml                 |  2 +-
 charts/external-dns/templates/clusterrole.yaml | 10 ++++++++++
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/charts/external-dns/Chart.yaml b/charts/external-dns/Chart.yaml
index fc0c979f61..199eef681c 100644
--- a/charts/external-dns/Chart.yaml
+++ b/charts/external-dns/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: external-dns
 description: ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
 type: application
-version: 1.4.0
+version: 1.4.1
 appVersion: 0.10.1
 keywords:
   - kubernetes
diff --git a/charts/external-dns/templates/clusterrole.yaml b/charts/external-dns/templates/clusterrole.yaml
index e46a66dd75..bca96ce1e8 100644
--- a/charts/external-dns/templates/clusterrole.yaml
+++ b/charts/external-dns/templates/clusterrole.yaml
@@ -15,4 +15,14 @@ rules:
   - apiGroups: [""]
     resources: ["nodes"]
     verbs: ["list","watch"]
+{{- if has "istio-gateway" .Values.sources }}
+  - apiGroups: ["networking.istio.io"]
+    resources: ["gateways"]
+    verbs: ["get","watch","list"]
+{{- end }}
+{{- if has "istio-virtualservice" .Values.sources }}
+  - apiGroups: ["networking.istio.io"]
+    resources: ["virtualservices"]
+    verbs: ["get","watch","list"]
+{{- end }}
 {{- end }}