mirror of https://git.rancher.io/rke2-charts
38 lines
898 B
Diff
38 lines
898 B
Diff
|
--- charts-original/templates/tigera-operator/02-role-tigera-operator.yaml
|
||
|
|
+++ charts/templates/tigera-operator/02-role-tigera-operator.yaml
|
||
|
|
@@ -1,4 +1,3 @@
|
||
|
|
-# Permissions required when running the operator for a Calico cluster.
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
@@ -29,11 +28,11 @@
|
||
|
|
- nodes
|
||
|
|
verbs:
|
||
|
|
# Need to update node labels when migrating nodes.
|
||
|
|
- - get
|
||
|
|
- - patch
|
||
|
|
- - list
|
||
|
|
+ - 'get'
|
||
|
|
+ - 'patch'
|
||
|
|
+ - 'list'
|
||
|
|
# We need this for Typha autoscaling
|
||
|
|
- - watch
|
||
|
|
+ - 'watch'
|
||
|
|
- apiGroups:
|
||
|
|
- rbac.authorization.k8s.io
|
||
|
|
resources:
|
||
|
|
@@ -126,6 +125,13 @@
|
||
|
|
- delete
|
||
|
|
- watch
|
||
|
|
- apiGroups:
|
||
|
|
+ - monitoring.coreos.com
|
||
|
|
+ resources:
|
||
|
|
+ - servicemonitors
|
||
|
|
+ verbs:
|
||
|
|
+ - get
|
||
|
|
+ - create
|
||
|
|
+ - apiGroups:
|
||
|
|
- policy
|
||
|
|
resources:
|
||
|
|
- poddisruptionbudgets
|