External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-01-11 10:00:03 -03:30
Code Issues Packages Projects Releases Wiki Activity

Add rbac for calico kube-controllers to access services (#12831)

Browse Source 
Co-authored-by: Lawik974 <loic97429@gmail.com>
This commit is contained in:
k8s-infra-cherrypick-robot 2026-01-02 07:30:35 -08:00 committed by GitHub
parent 84d8746b41
commit 5fb85dc8a5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
View File

@ -26,6 +26,16 @@ rules:
verbs: verbs:
- watch - watch
- list - list
# Services are monitored for service LoadBalancer IP allocation
- apiGroups: [""]
resources:
- services
- services/status
verbs:
- get
- list
- update
- watch
{% elif calico_datastore == "kdd" %} {% elif calico_datastore == "kdd" %}
# Nodes are watched to monitor for deletions. # Nodes are watched to monitor for deletions.
- apiGroups: [""] - apiGroups: [""]