Browse Source

Merge pull request #10443 from mgleung/calico-rbac

Add permissions for the Calico CNI plugin to access namespaces
Scott Dodson 6 years ago
parent
commit
ffdce7c605
1 changed files with 2 additions and 0 deletions
  1. 2 0
      roles/calico/templates/calicov3.yml.j2

+ 2 - 0
roles/calico/templates/calicov3.yml.j2

@@ -14,6 +14,7 @@ rules:
       - namespaces
       - networkpolicies
       - nodes
+      - serviceaccounts
     verbs:
       - watch
       - list
@@ -49,6 +50,7 @@ rules:
   - apiGroups: [""]
     resources:
       - pods
+      - namespaces
       - nodes
     verbs:
       - get