calico: Add node/status in ClusterRole
The upstream docs [0] were missing a parameters for the calico-node ClusterRole. Without it we get: 2020-02-21 11:41:35.762 [ERROR][8] ... User "system:serviceaccount:kube-system:calico-node" cannot patch resource "nodes/status" in API group "" at the cluster scope [0] https://docs.projectcalico.org/v3.3/getting-started/kubernetes/installation/hosted/rbac-kdd.yaml Needs to be backported to train. story: 2005318 task: 39041 Change-Id: Ib7d3068ee53c08fea32a69c997b6de6477a17f0a Signed-off-by: Spyros Trigazis <strigazi@gmail.com>
This commit is contained in:
parent
17c6034e69
commit
258ab71c28
|
@ -38,6 +38,11 @@ apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||||
metadata:
|
metadata:
|
||||||
name: calico-node
|
name: calico-node
|
||||||
rules:
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources:
|
||||||
|
- nodes/status
|
||||||
|
verbs:
|
||||||
|
- patch
|
||||||
- apiGroups: [""]
|
- apiGroups: [""]
|
||||||
resources:
|
resources:
|
||||||
- namespaces
|
- namespaces
|
||||||
|
|
Loading…
Reference in New Issue