From e979e770f2bb1e6f5e8cb178617f2459e880e30e Mon Sep 17 00:00:00 2001
From: Ali Afsharzadeh <afsharzadeh8@gmail.com>
Date: Tue, 17 Mar 2026 14:19:50 +0330
Subject: [PATCH] Fix calico api server permissions (#13101)

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
---
 roles/network_plugin/calico/templates/calico-apiserver.yml.j2 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2
index 06f476f02..70ddb70de 100644
--- a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2
+++ b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2
@@ -177,6 +177,9 @@ rules:
   - blockaffinities
   - caliconodestatuses
   - tiers
+  - stagednetworkpolicies
+  - stagedglobalnetworkpolicies
+  - stagedkubernetesnetworkpolicies
   verbs:
   - get
   - list