Add missing permissions to openstack cc (#9335)

Add missing permissions to Openstack cloud controller to make sure controller runs as intended
2022-09-28 07:19:35 +02:00
parent 49196c2ec4
commit a8e4984cf7
1 changed files with 12 additions and 0 deletions
--- a/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2
+++ b/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2
@ -93,5 +93,17 @@ items:
    - list
    - get
    - watch
+  - apiGroups:
+    - authentication.k8s.io
+    resources:
+    - tokenreviews
+    verbs:
+    - create
+  - apiGroups:
+    - authorization.k8s.io
+    resources:
+    - subjectaccessreviews
+    verbs:
+    - create
 kind: List
 metadata: {}