From 14749df6f3919d413f36039fee107578d28961cf Mon Sep 17 00:00:00 2001 From: Aleksey Kasatkin Date: Thu, 9 May 2019 10:30:49 +0200 Subject: [PATCH] Fix "netchecker-server" ClusterRole (#4730) * Add sha256 hashes for calicoctl v3.6.1 Hashes are added to calicoctl_binary_checksums for both adm and arm platforms. * Add rules for "network-checker.ext" resource to "netchecker-server" ClusterRole So that it could access the resource after it is created. Corresponding issues: https://github.com/Mirantis/k8s-netchecker-server/issues/125 https://github.com/kubernetes-sigs/kubespray/issues/3281 --- .../ansible/templates/netchecker-server-clusterrole.yml.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/kubernetes-apps/ansible/templates/netchecker-server-clusterrole.yml.j2 b/roles/kubernetes-apps/ansible/templates/netchecker-server-clusterrole.yml.j2 index 19bdc8b1f..260a3fa58 100644 --- a/roles/kubernetes-apps/ansible/templates/netchecker-server-clusterrole.yml.j2 +++ b/roles/kubernetes-apps/ansible/templates/netchecker-server-clusterrole.yml.j2 @@ -10,3 +10,6 @@ rules: - apiGroups: ["apiextensions.k8s.io"] resources: ["customresourcedefinitions"] verbs: ['*'] + - apiGroups: ["network-checker.ext"] + resources: ["agents"] + verbs: ['*']