mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-22 12:00:35 +00:00
Configure RBAC for Globalnet pods on OCP deployments
Globalnet controller now uses internal services with external-ips
to support exported services. On OCP Clusters, we require an explicit
RBAC to create services with external-ips, this PR includes the
necessary RBAC for Globalnet pods.
Related to: https://github.com/submariner-io/submariner/issues/1166
Signed-Off-by: Sridhar Gaddam <sgaddam@redhat.com>
(cherry picked from commit bf2c41115b)
This commit is contained in:
committed by
Thomas Pantelis
parent
cdc0e0e0c5
commit
85bc80cbe4
@@ -737,6 +737,15 @@ rules:
|
|||||||
- get
|
- get
|
||||||
- list
|
- list
|
||||||
- watch
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- network.openshift.io
|
||||||
|
resources:
|
||||||
|
- service/externalips
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- delete
|
||||||
---
|
---
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
|||||||
Reference in New Issue
Block a user