Add missing permission for kube-controllers (#9786)

Let it list its config so it can watch it.
projectcalico · Feb 4, 2025 · c1c7a41 · c1c7a41
1 parent ce0598a
commit c1c7a41
Show file tree

Hide file tree

Showing 9 changed files with 9 additions and 0 deletions.
diff --git a/charts/calico/templates/calico-kube-controllers-rbac.yaml b/charts/calico/templates/calico-kube-controllers-rbac.yaml
@@ -128,6 +128,7 @@ rules:
     verbs:
       # read its own config
       - get
+      - list
       # create a default if none exists
       - create
       # update status

diff --git a/manifests/calico-bpf.yaml b/manifests/calico-bpf.yaml
diff --git a/manifests/calico-policy-only.yaml b/manifests/calico-policy-only.yaml
diff --git a/manifests/calico-typha.yaml b/manifests/calico-typha.yaml
diff --git a/manifests/calico-vxlan.yaml b/manifests/calico-vxlan.yaml
diff --git a/manifests/calico.yaml b/manifests/calico.yaml
diff --git a/manifests/canal.yaml b/manifests/canal.yaml
diff --git a/manifests/flannel-migration/calico.yaml b/manifests/flannel-migration/calico.yaml
diff --git a/node/tests/k8st/infra/calico-kdd.yaml b/node/tests/k8st/infra/calico-kdd.yaml
@@ -194,6 +194,7 @@ rules:
     verbs:
       # read its own config
       - get
+      - list
       # create a default if none exists
       - create
       # update status
-Original file line number
+Diff line change
@@ Expand Up / @@ -128,6 +128,7 @@ rules: @@
         verbs:
           # read its own config
           - get
+          - list
           # create a default if none exists
           - create
           # update status
@@ Expand Down @@