5b0e88339a
When upgrading cilium from 1.8.8 to 1.9.5 I ran into the following error: level=error msg="Unable to update CRD" error="customresourcedefinitions.apiextensions.k8s.io \"ciliumnodes.cilium.io\" is forbidden: User \"system:serviceaccount:kube-system:cilium-operator\" cannot update resource \"customresourcedefinitions\" in API group \"apiextensions.k8s.io\" at the cluster scope" name=CiliumNode/v2 subsys=k8s The fix was to add the update verb to the clusterrole. I also added create to match the clusterrole created by the cilium helm chart. |
||
|---|---|---|
| .. | ||
| adduser | ||
| bastion-ssh-config | ||
| bootstrap-os | ||
| container-engine | ||
| download | ||
| etcd | ||
| etcdctl | ||
| kubernetes | ||
| kubernetes-apps | ||
| kubespray-defaults | ||
| network_plugin | ||
| recover_control_plane | ||
| remove-node | ||
| reset | ||
| upgrade | ||
| win_nodes/kubernetes_patch | ||