fix: 🐛 calico-cni-plugin missing RBAC (#11077)

To configure node asNumber for per node peering service account calico-cni-plugin need nodes/status update rights ✅ Closes: 11076
kubernetes-sigs · Apr 22, 2024 · 4db3e2c · 4db3e2c
1 parent 3d19e74
commit 4db3e2c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/roles/network_plugin/calico/templates/calico-cr.yml.j2 b/roles/network_plugin/calico/templates/calico-cr.yml.j2
@@ -16,6 +16,11 @@ rules:
       - pods/status
     verbs:
       - patch
+  - apiGroups: [""]
+    resources:
+      - nodes/status
+    verbs:
+      - update
   - apiGroups: ["crd.projectcalico.org"]
     resources:
       - blockaffinities