From 437189c2138d13f5511e46c4520970da59a81a3e Mon Sep 17 00:00:00 2001 From: qvicksilver Date: Mon, 18 May 2020 11:35:45 +0200 Subject: [PATCH] Fix missing permissions for OpenStack cloud-controller-manager preventing metrics scraping (#6124) --- ...-openstack-cloud-controller-manager-roles.yml.j2 | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2 b/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2 index 1e8816e29..f89cd4b67 100644 --- a/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2 +++ b/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2 @@ -81,6 +81,19 @@ items: - list - get - watch + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create + - apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: