From dd75b889609be766bac2497b788917096871ec8d Mon Sep 17 00:00:00 2001 From: k8s-infra-cherrypick-robot <90416843+k8s-infra-cherrypick-robot@users.noreply.github.com> Date: Wed, 18 Mar 2026 15:38:28 -0700 Subject: [PATCH] Fix calico api server permissions (#13115) Signed-off-by: Ali Afsharzadeh Co-authored-by: Ali Afsharzadeh --- roles/network_plugin/calico/templates/calico-apiserver.yml.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 index 06f476f02..70ddb70de 100644 --- a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 +++ b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 @@ -177,6 +177,9 @@ rules: - blockaffinities - caliconodestatuses - tiers + - stagednetworkpolicies + - stagedglobalnetworkpolicies + - stagedkubernetesnetworkpolicies verbs: - get - list