fix: 🐛 calico-cni-plugin missing RBAC (#11077)

To configure node asNumber for per node peering service account calico-cni-plugin need nodes/status update rights ✅ Closes: 11076
2024-04-22 19:09:37 +02:00
parent 3d19e744f0
commit 4db3e2c3cf
1 changed files with 5 additions and 0 deletions
--- a/roles/network_plugin/calico/templates/calico-cr.yml.j2
+++ b/roles/network_plugin/calico/templates/calico-cr.yml.j2
@ -16,6 +16,11 @@ rules:
      - pods/status
    verbs:
      - patch
+  - apiGroups: [""]
+    resources:
+      - nodes/status
+    verbs:
+      - update
  - apiGroups: ["crd.projectcalico.org"]
    resources:
      - blockaffinities