From 32854ff3191932c3aaeae2a6f9baa95ec2e115b1 Mon Sep 17 00:00:00 2001
From: Antonio Ojea <aojea@google.com>
Date: Wed, 15 Jan 2025 11:15:39 +0000
Subject: [PATCH] fix kindnet permissions

Change-Id: Ib910093371ea69892033b469b723b0a5daf00892
---
 ...bject_minimal-ipv6.example.com-addons-bootstrap_content | 2 +-
 ....example.com-addons-networking.kindnet-k8s-1.32_content | 7 +++++++
 ...ect_privatekindnet.example.com-addons-bootstrap_content | 2 +-
 ....example.com-addons-networking.kindnet-k8s-1.32_content | 7 +++++++
 .../addons/networking.kindnet/k8s-1.32.yaml.template       | 7 +++++++
 5 files changed, 23 insertions(+), 2 deletions(-)

diff --git a/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
index 91e70bc2ba63e..01825cbdab877 100644
--- a/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content
@@ -99,7 +99,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.32
     manifest: networking.kindnet/k8s-1.32.yaml
-    manifestHash: 94a6df20bdbaafa96a21757cce17c3423a82e9fff86308de418cdbb0b272bb41
+    manifestHash: b6731b412e046c9ae24d1a845169a3ed153ab57f544c88cf37497d2b56efd406
     name: networking.kindnet
     needsRollingUpdate: all
     selector:
diff --git a/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-networking.kindnet-k8s-1.32_content b/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-networking.kindnet-k8s-1.32_content
index 30d20d38c6681..eafb1a86b4657 100644
--- a/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-networking.kindnet-k8s-1.32_content
+++ b/tests/integration/update_cluster/minimal-ipv6-kindnet/data/aws_s3_object_minimal-ipv6.example.com-addons-networking.kindnet-k8s-1.32_content
@@ -16,6 +16,13 @@ rules:
   - list
   - watch
   - patch
+- apiGroups:
+  - ""
+  resources:
+  - nodes/proxy
+  - nodes/configz
+  verbs:
+  - get
 - apiGroups:
   - ""
   resources:
diff --git a/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-bootstrap_content
index aef85f19180ac..15aa7f0d1195e 100644
--- a/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-bootstrap_content
@@ -99,7 +99,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.32
     manifest: networking.kindnet/k8s-1.32.yaml
-    manifestHash: 7acb14096bbfa57eeddf70108830a2904d227671b7140af7de5f0adf1a2e98dc
+    manifestHash: 6cd95c3169eee904a4b1e9605f49aee25903b0bca938f830bfe9b3d1981918e8
     name: networking.kindnet
     needsRollingUpdate: all
     selector:
diff --git a/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-networking.kindnet-k8s-1.32_content b/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-networking.kindnet-k8s-1.32_content
index 670e29acbd56e..44be252ec49a3 100644
--- a/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-networking.kindnet-k8s-1.32_content
+++ b/tests/integration/update_cluster/privatekindnet/data/aws_s3_object_privatekindnet.example.com-addons-networking.kindnet-k8s-1.32_content
@@ -16,6 +16,13 @@ rules:
   - list
   - watch
   - patch
+- apiGroups:
+  - ""
+  resources:
+  - nodes/proxy
+  - nodes/configz
+  verbs:
+  - get
 - apiGroups:
   - ""
   resources:
diff --git a/upup/models/cloudup/resources/addons/networking.kindnet/k8s-1.32.yaml.template b/upup/models/cloudup/resources/addons/networking.kindnet/k8s-1.32.yaml.template
index 6190e8fd8cee5..0363267f377da 100644
--- a/upup/models/cloudup/resources/addons/networking.kindnet/k8s-1.32.yaml.template
+++ b/upup/models/cloudup/resources/addons/networking.kindnet/k8s-1.32.yaml.template
@@ -12,6 +12,13 @@ rules:
       - list
       - watch
       - patch
+  - apiGroups:
+      - ""
+    resources:
+      - nodes/proxy
+      - nodes/configz
+    verbs:
+      - get
   - apiGroups:
      - ""
     resources: