From bf2c41115bb332a3f1c4d75f753e84c74dbc0175 Mon Sep 17 00:00:00 2001 From: Sridhar Gaddam Date: Thu, 13 Jan 2022 21:21:03 +0530 Subject: [PATCH] Configure RBAC for Globalnet pods on OCP deployments Globalnet controller now uses internal services with external-ips to support exported services. On OCP Clusters, we require an explicit RBAC to create services with external-ips, this PR includes the necessary RBAC for Globalnet pods. Related to: https://github.com/submariner-io/submariner/issues/1166 Signed-Off-by: Sridhar Gaddam --- submariner-operator/templates/rbac.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/submariner-operator/templates/rbac.yaml b/submariner-operator/templates/rbac.yaml index 62a9a09..91016fd 100644 --- a/submariner-operator/templates/rbac.yaml +++ b/submariner-operator/templates/rbac.yaml @@ -737,6 +737,15 @@ rules: - get - list - watch + - apiGroups: + - network.openshift.io + resources: + - service/externalips + verbs: + - create + - get + - list + - delete --- {{- end -}} apiVersion: rbac.authorization.k8s.io/v1