calico: fix access to resources from controller

This fixes even more networking issues. Change-Id: I754656a01e3de8a34055280908b343a1a25a4707
2020-05-30 17:57:05 +02:00 · 2020-05-30 17:57:05 +02:00 · e55493f635
parent ba375e62b2
commit e55493f635
1 changed files with 1 additions and 6 deletions
--- a/cluster/kube/lib/calico.libsonnet
+++ b/cluster/kube/lib/calico.libsonnet
@ -170,14 +170,9 @@ local bindServiceAccountClusterRole(sa, cr) = kube.ClusterRoleBinding(cr.metadat
            rules: [
                {
                    apiGroups: [""],
-                    resources: ["nodes"],
+                    resources: ["nodes", "pods", "namespaces", "serviceaccounts"],
                    verbs: ["watch", "list", "get"],
                },
-                {
-                    apiGroups: [""],
-                    resources: ["pods"],
-                    verbs: ["get"],
-                },
                {
                    apiGroups: ["networking.k8s.io"],
                    resources: ["networkpolicies"],