From 9b8c30de669c10e6957f20d7e07808d2d099f907 Mon Sep 17 00:00:00 2001 From: k8s-infra-cherrypick-robot <90416843+k8s-infra-cherrypick-robot@users.noreply.github.com> Date: Wed, 18 Mar 2026 02:00:32 -0700 Subject: [PATCH] Fix calico api server permissions (#13113) Signed-off-by: Ali Afsharzadeh Co-authored-by: Ali Afsharzadeh --- roles/network_plugin/calico/templates/calico-apiserver.yml.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 index 06f476f02..70ddb70de 100644 --- a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 +++ b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 @@ -177,6 +177,9 @@ rules: - blockaffinities - caliconodestatuses - tiers + - stagednetworkpolicies + - stagedglobalnetworkpolicies + - stagedkubernetesnetworkpolicies verbs: - get - list