mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-01-12 02:20:01 -03:30
* Update cluster-role for cilium to prevent errors in agent startup ciliumloadbalancerippools permissions exists in the cilium helm chart for version 1.13.0 https://github.com/cilium/cilium/blob/v1.13.0/install/kubernetes/cilium/templates/cilium-agent/clusterrole.yaml#L71 The agent also needs permissions to read/watch secrets for bgp auth secrets when using CiliumBGPPeeringPolicy with a secret. * Remove list/watch permissions for secrets * Remove secrets from list/watch permissions