From 9232261665052e2304f105f168665e0b62cadd40 Mon Sep 17 00:00:00 2001
From: Erwan Miran <mirwan@users.noreply.github.com>
Date: Thu, 4 Oct 2018 20:32:37 +0200
Subject: [PATCH] serviceaccounts is required in resources list of cluster role
 (#3455)

---
 .../policy_controller/calico/templates/calico-kube-cr.yml.j2   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2 b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
index bf582c769..36e4dcc40 100644
--- a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
+++ b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
@@ -13,6 +13,7 @@ rules:
       - namespaces
       - networkpolicies
       - nodes
+      - serviceaccounts
     verbs:
       - watch
       - list
@@ -22,4 +23,4 @@ rules:
       - networkpolicies
     verbs:
       - watch
-      - list
\ No newline at end of file
+      - list