5b0e88339a
When upgrading cilium from 1.8.8 to 1.9.5 I ran into the following error: level=error msg="Unable to update CRD" error="customresourcedefinitions.apiextensions.k8s.io \"ciliumnodes.cilium.io\" is forbidden: User \"system:serviceaccount:kube-system:cilium-operator\" cannot update resource \"customresourcedefinitions\" in API group \"apiextensions.k8s.io\" at the cluster scope" name=CiliumNode/v2 subsys=k8s The fix was to add the update verb to the clusterrole. I also added create to match the clusterrole created by the cilium helm chart. |
||
|---|---|---|
| .. | ||
| calico | ||
| canal | ||
| cilium | ||
| cni/tasks | ||
| flannel | ||
| kube-ovn | ||
| kube-router | ||
| macvlan | ||
| meta | ||
| multus | ||
| ovn4nfv | ||
| weave | ||