External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-07-24 14:48:24 -02:30
Code Issues Packages Projects Releases Wiki Activity

fix(calico): Add missing permissions in RBAC for calico-kube-controllers (#13375)

Browse Source 
* fix(calico): Add namespace rbac for calico-kube-controllers

* fix(calico): Add missing RBAC resource for calico-kube-controllers
This commit is contained in:
Toshihiko Kimura
2026-07-18 00:19:30 +09:00
committed by GitHub
parent cbcda6ea8d
commit 2d8f15f95a
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
View File

@@ -71,6 +71,7 @@ rules:
- blockaffinities - blockaffinities
- ipamblocks - ipamblocks
- ipamhandles - ipamhandles
- ipamconfigs
- tiers - tiers
verbs: verbs:
- get - get
@@ -124,4 +125,12 @@ rules:
- list - list
- update - update
- watch - watch
# Namespaces are watched for LoadBalancer IP allocation with namespace selector support
- apiGroups: [""]
resources:
- namespaces
verbs:
- get
- list
- watch
{% endif %} {% endif %}