Add RBAC for publishing events, and env var for pod name

linkerd · Dec 6, 2023 · a38b17e · a38b17e
1 parent 1ca137a
commit a38b17e
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/charts/linkerd2-cni/templates/cni-plugin.yaml b/charts/linkerd2-cni/templates/cni-plugin.yaml
@@ -115,6 +115,9 @@ rules:
 - apiGroups: [""]
   resources: ["pods/eviction"]
   verbs: ["create"]
+- apiGroups: ["events.k8s.io"]
+  resources: ["events"]
+  verbs: ["create"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -286,10 +289,14 @@ spec:
         imagePullPolicy: {{ .Values.reinitializePods.image.pullPolicy }}
         {{- if .Values.reinitializePods.enableSecurityContext }}
         env:
-        - name: LINKERD_REINITIALIZE_PODS_POD_NODE_NAME
+        - name: LINKERD_REINITIALIZE_PODS_NODE_NAME
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
+        - name: LINKERD_REINITIALIZE_PODS_POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
         command:
           - /usr/lib/linkerd/linkerd-reinitialize-pods
         args: