c12s-kubespray/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2

---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: calico-kube-controllers
  namespace: kube-system
rules:
  - apiGroups:
    - ""
    - extensions
    resources:
      - pods
      - namespaces
      - networkpolicies
    verbs:
      - watch
      - list
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 08:29:40 +00:00			`---`
			`kind: ClusterRole`
			`apiVersion: rbac.authorization.k8s.io/v1beta1`
			`metadata:`
update calico to 2.6.2 (#1874) Move RS to deployment so no need to take care of the revision history limits : - Delete the old RS - Make Calico manifest a deployment - move deployments to apps/v1beta2 API since Kubernetes 1.8 2017-11-28 12:01:30 +00:00			`name: calico-kube-controllers`
Stop templating kube-system namespace and creating it (#2545) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it. 2018-03-30 11:29:13 +00:00			`namespace: kube-system`
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 08:29:40 +00:00			`rules:`
			`- apiGroups:`
			`- ""`
			`- extensions`
			`resources:`
			`- pods`
			`- namespaces`
			`- networkpolicies`
			`verbs:`
			`- watch`
			`- list`