Merge pull request #576 from hzxuzhonghu/np-rbac

Enable networkpolicy create/get permission
volcano-sh · Dec 3, 2019 · 759b8a4 · 759b8a4
2 parents 9077081 + 3e6cdfd
commit 759b8a4
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/installer/helm/chart/volcano/templates/controllers.yaml b/installer/helm/chart/volcano/templates/controllers.yaml
@@ -46,6 +46,9 @@ rules:
   - apiGroups: ["scheduling.k8s.io"]
     resources: ["priorityclasses"]
     verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: ["networking.k8s.io"]
+    resources: ["networkpolicies"]
+    verbs: ["get", "create"]
 
 ---
 kind: ClusterRoleBinding

diff --git a/installer/volcano-development.yaml b/installer/volcano-development.yaml
@@ -321,6 +321,9 @@ rules:
   - apiGroups: ["scheduling.k8s.io"]
     resources: ["priorityclasses"]
     verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: ["networking.k8s.io"]
+    resources: ["networkpolicies"]
+    verbs: ["get", "create"]
 
 ---
 kind: ClusterRoleBinding