Fix missing permissions for OpenStack cloud-controller-manager preventing metrics scraping (#6124)

2020-05-18 11:35:45 +02:00 · 2020-05-18 11:35:45 +02:00 · 437189c213
parent 0f5fd1edc0
commit 437189c213
1 changed files with 13 additions and 0 deletions
--- a/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2
+++ b/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2
@ -81,6 +81,19 @@ items:
    - list
    - get
    - watch
+  - apiGroups:
+    - authentication.k8s.io
+    resources:
+    - tokenreviews
+    verbs:
+    - create
+  - apiGroups:
+    - authorization.k8s.io
+    resources:
+    - subjectaccessreviews
+    verbs:
+    - create
+
 - apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata: