kubespray/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2

---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: calico-kube-controllers
  namespace: kube-system
rules:
  - apiGroups:
    - ""
    - extensions
    resources:
      - pods
      - namespaces
      - networkpolicies
      - nodes
      - serviceaccounts
    verbs:
      - watch
      - list
  - apiGroups:
    - networking.k8s.io
    resources:
      - networkpolicies
    verbs:
      - watch
      - list
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 16:29:40 +08:00			`---`
			`kind: ClusterRole`
			`apiVersion: rbac.authorization.k8s.io/v1beta1`
			`metadata:`
update calico to 2.6.2 (#1874) Move RS to deployment so no need to take care of the revision history limits : - Delete the old RS - Make Calico manifest a deployment - move deployments to apps/v1beta2 API since Kubernetes 1.8 2017-11-28 20:01:30 +08:00			`name: calico-kube-controllers`
Stop templating kube-system namespace and creating it (#2545) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it. 2018-03-30 19:29:13 +08:00			`namespace: kube-system`
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 16:29:40 +08:00			`rules:`
			`- apiGroups:`
			`- ""`
			`- extensions`
			`resources:`
			`- pods`
			`- namespaces`
			`- networkpolicies`
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml 2018-08-23 22:17:18 +08:00			`- nodes`
serviceaccounts is required in resources list of cluster role (#3455) 2018-10-05 02:32:37 +08:00			`- serviceaccounts`
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 16:29:40 +08:00			`verbs:`
			`- watch`
			`- list`
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml 2018-08-23 22:17:18 +08:00			`- apiGroups:`
			`- networking.k8s.io`
			`resources:`
			`- networkpolicies`
			`verbs:`
			`- watch`
serviceaccounts is required in resources list of cluster role (#3455) 2018-10-05 02:32:37 +08:00			`- list`