serviceaccounts is required in resources list of cluster role (#3455)

6 years ago · 9232261665
1 changed files with 2 additions and 1 deletions
--- a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
+++ b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
@ -13,6 +13,7 @@ rules:
      - namespaces
      - networkpolicies
      - nodes
+      - serviceaccounts
    verbs:
      - watch
      - list
@ -22,4 +23,4 @@ rules:
      - networkpolicies
    verbs:
      - watch
-      - list
+      - list