From ed12936be243eef5070ad8ceba36558ddaaa299d Mon Sep 17 00:00:00 2001
From: Anton Kulikov <4ops@protonmail.com>
Date: Mon, 11 May 2020 14:25:51 +0300
Subject: [PATCH] Add missing RBAC rule #6116 (#6121)

---
 .../calico/templates/calico-kube-cr.yml.j2                  | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2 b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
index b7c4c624d..5f5a9586c 100644
--- a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
+++ b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
@@ -18,6 +18,12 @@ rules:
     verbs:
       - watch
       - list
+  - apiGroups:
+    - ""
+    resources:
+      - nodes
+    verbs:
+      - get
   - apiGroups:
     - networking.k8s.io
     resources: