forked from hswaw/hscloud
calico: fix access to resources from controller
This fixes even more networking issues. Change-Id: I754656a01e3de8a34055280908b343a1a25a4707master
parent
ba375e62b2
commit
e55493f635
|
@ -170,14 +170,9 @@ local bindServiceAccountClusterRole(sa, cr) = kube.ClusterRoleBinding(cr.metadat
|
||||||
rules: [
|
rules: [
|
||||||
{
|
{
|
||||||
apiGroups: [""],
|
apiGroups: [""],
|
||||||
resources: ["nodes"],
|
resources: ["nodes", "pods", "namespaces", "serviceaccounts"],
|
||||||
verbs: ["watch", "list", "get"],
|
verbs: ["watch", "list", "get"],
|
||||||
},
|
},
|
||||||
{
|
|
||||||
apiGroups: [""],
|
|
||||||
resources: ["pods"],
|
|
||||||
verbs: ["get"],
|
|
||||||
},
|
|
||||||
{
|
{
|
||||||
apiGroups: ["networking.k8s.io"],
|
apiGroups: ["networking.k8s.io"],
|
||||||
resources: ["networkpolicies"],
|
resources: ["networkpolicies"],
|
||||||
|
|
Loading…
Reference in New Issue