Add role for globalnet controller to annotate a node

As part of supporting connectivity from HostNetwork to remoteClusters, globalnet
controller annotates a node with globalIP. This PR adds the necessary roles for
globalnetController.

Signed-off-by: Sridhar Gaddam <sgaddam@redhat.com>
This commit is contained in:
Sridhar Gaddam
2020-04-09 22:58:57 +05:30
parent f3ff20e128
commit 80bdf3eb07
+1 -4
View File
@@ -69,11 +69,8 @@ metadata:
name: {{ template "submariner.fullname" . }}:globalnet
rules:
- apiGroups: [""]
resources: ["services", "namespaces", "pods"]
resources: ["services", "namespaces", "pods", "nodes"]
verbs: ["get", "list", "watch", "update"]
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get"]
- apiGroups: ["submariner.io"]
resources: ["endpoints", "clusters"]
verbs: ["get", "list", "watch"]