External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-01-14 03:10:44 -03:30
Code Issues Packages Projects Releases Wiki Activity

fix: kubecontrollersconfigurations list permission (#12039)

Browse Source 
[WARNING][1] kube-controllers/runconfig.go 193: unable to list KubeControllersConfiguration(default) error=connection is unauthorized: kubecontrollersconfigurations.crd.projectcalico.org "default" is forbidden: User "system:serviceaccount:kube-system:calico-kube-controllers" cannot list resource "kubecontrollersconfigurations" in API group "crd.projectcalico.org" at the cluster scope

Co-authored-by: darkobas <marko@datafund.io>
This commit is contained in:
k8s-infra-cherrypick-robot 2025-03-15 09:15:47 -07:00 committed by GitHub
parent 1af53ce9a6
commit e354295476
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
View File

@ -101,6 +101,7 @@ rules:
verbs:
# read its own config
- get
- list
# create a default if none exists
- create
# update status