Fixes issue #7573 - Made Calico permissions compatible with v3.18.x (see https://github.com/projectcalico/calico/issues/4557). Specifically, granted watch to custom resources blockaffinities, ipamblocks & ipamhandles (#7575)

2021-04-30 15:25:59 +01:00 · 2021-04-30 15:25:59 +01:00 · 3f4eb9be08
parent 5ea2d1eb67
commit 3f4eb9be08
1 changed files with 1 additions and 0 deletions
--- a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
+++ b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
@ -63,6 +63,7 @@ rules:
      - create
      - update
      - delete
+      - watch
  # kube-controllers manages hostendpoints.
  - apiGroups: ["crd.projectcalico.org"]
    resources: