From 80bdf3eb07003958cd646b31e74654c6b4186ed9 Mon Sep 17 00:00:00 2001 From: Sridhar Gaddam Date: Thu, 9 Apr 2020 22:58:51 +0530 Subject: [PATCH] Add role for globalnet controller to annotate a node As part of supporting connectivity from HostNetwork to remoteClusters, globalnet controller annotates a node with globalIP. This PR adds the necessary roles for globalnetController. Signed-off-by: Sridhar Gaddam --- submariner/templates/rbac.yaml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/submariner/templates/rbac.yaml b/submariner/templates/rbac.yaml index de2b6ec..1247f06 100644 --- a/submariner/templates/rbac.yaml +++ b/submariner/templates/rbac.yaml @@ -69,11 +69,8 @@ metadata: name: {{ template "submariner.fullname" . }}:globalnet rules: - apiGroups: [""] - resources: ["services", "namespaces", "pods"] + resources: ["services", "namespaces", "pods", "nodes"] verbs: ["get", "list", "watch", "update"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get"] - apiGroups: ["submariner.io"] resources: ["endpoints", "clusters"] verbs: ["get", "list", "watch"]