From 4aacec454256cf35b2b2fd0c34a006a09d39865e Mon Sep 17 00:00:00 2001
From: JaneLiuL <56822274+JaneLiuL@users.noreply.github.com>
Date: Mon, 20 Feb 2023 17:43:40 +0800
Subject: [PATCH] fix calico rbac issue (#9806)

---
 roles/network_plugin/calico/templates/calico-cr.yml.j2 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/network_plugin/calico/templates/calico-cr.yml.j2 b/roles/network_plugin/calico/templates/calico-cr.yml.j2
index b911b8737..2e379a364 100644
--- a/roles/network_plugin/calico/templates/calico-cr.yml.j2
+++ b/roles/network_plugin/calico/templates/calico-cr.yml.j2
@@ -144,6 +144,7 @@ rules:
       - ipamconfigs
     verbs:
       - get
+      - create
   # Block affinities must also be watchable by confd for route aggregation.
   - apiGroups: ["crd.projectcalico.org"]
     resources: