浏览代码

Merge pull request #10443 from mgleung/calico-rbac

Add permissions for the Calico CNI plugin to access namespaces
Scott Dodson 6 年之前
父节点
当前提交
ffdce7c605
共有 1 个文件被更改,包括 2 次插入0 次删除
  1. 2 0
      roles/calico/templates/calicov3.yml.j2

+ 2 - 0
roles/calico/templates/calicov3.yml.j2

@@ -14,6 +14,7 @@ rules:
       - namespaces
       - namespaces
       - networkpolicies
       - networkpolicies
       - nodes
       - nodes
+      - serviceaccounts
     verbs:
     verbs:
       - watch
       - watch
       - list
       - list
@@ -49,6 +50,7 @@ rules:
   - apiGroups: [""]
   - apiGroups: [""]
     resources:
     resources:
       - pods
       - pods
+      - namespaces
       - nodes
       - nodes
     verbs:
     verbs:
       - get
       - get