c12s-kubespray/roles/network_plugin/canal/templates/canal-cr-flannel.yml.j2

---
# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: flannel
rules:
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - get
  - apiGroups:
      - ""
    resources:
      - nodes
    verbs:
      - list
      - watch
  - apiGroups:
      - ""
    resources:
      - nodes/status
    verbs:
      - patch
  - apiGroups:
    - policy
    resourceNames:
    - privileged
    resources:
    - podsecuritypolicies
    verbs:
    - use
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 08:29:40 +00:00			`---`
			`# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml`
			`kind: ClusterRole`
			`apiVersion: rbac.authorization.k8s.io/v1beta1`
			`metadata:`
			`name: flannel`
			`rules:`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- pods`
			`verbs:`
			`- get`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- nodes`
			`verbs:`
			`- list`
			`- watch`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- nodes/status`
			`verbs:`
			`- patch`
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true 2018-08-22 16:16:13 +00:00			`- apiGroups:`
			`- policy`
			`resourceNames:`
			`- privileged`
			`resources:`
			`- podsecuritypolicies`
			`verbs:`
			`- use`