Calico: 3.20.0 policy update to allow access to endpointslices (#7899)

2021-08-25 22:06:01 +03:00
parent 71af4b4a85
commit 1c3d33e146
1 changed files with 10 additions and 0 deletions
--- a/roles/network_plugin/calico/templates/calico-cr.yml.j2
+++ b/roles/network_plugin/calico/templates/calico-cr.yml.j2
@ -13,6 +13,16 @@ rules:
      - configmaps
    verbs:
      - get
+{% if calico_version is version("v3.20.0", ">=") %}
+  # EndpointSlices are used for Service-based network policy rule
+  # enforcement.
+  - apiGroups: ["discovery.k8s.io"]
+    resources:
+      - endpointslices
+    verbs:
+      - watch
+      - list
+{% endif %}
  - apiGroups: [""]
    resources:
      - endpoints