c12s-kubespray/roles/network_plugin/calico/templates/calico-cr.yml.j2

---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: calico-node
  namespace: kube-system
rules:
  - apiGroups: [""]
    resources:
      - pods
      - nodes
    verbs:
      - get
  - apiGroups:
    - policy
    resourceNames:
    - privileged
    resources:
    - podsecuritypolicies
    verbs:
    - use
Move calico to daemonset (#1605) * Drop legacy calico logic * add calico as a daemonset 2017-09-04 08:29:51 +00:00			`---`
			`kind: ClusterRole`
			`apiVersion: rbac.authorization.k8s.io/v1beta1`
			`metadata:`
			`name: calico-node`
Stop templating kube-system namespace and creating it (#2545) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it. 2018-03-30 11:29:13 +00:00			`namespace: kube-system`
Move calico to daemonset (#1605) * Drop legacy calico logic * add calico as a daemonset 2017-09-04 08:29:51 +00:00			`rules:`
			`- apiGroups: [""]`
			`resources:`
			`- pods`
			`- nodes`
			`verbs:`
			`- get`
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true 2018-08-22 16:16:13 +00:00			`- apiGroups:`
			`- policy`
			`resourceNames:`
			`- privileged`
			`resources:`
			`- podsecuritypolicies`
			`verbs:`
			`- use`