5b0e88339a
When upgrading cilium from 1.8.8 to 1.9.5 I ran into the following error: level=error msg="Unable to update CRD" error="customresourcedefinitions.apiextensions.k8s.io \"ciliumnodes.cilium.io\" is forbidden: User \"system:serviceaccount:kube-system:cilium-operator\" cannot update resource \"customresourcedefinitions\" in API group \"apiextensions.k8s.io\" at the cluster scope" name=CiliumNode/v2 subsys=k8s The fix was to add the update verb to the clusterrole. I also added create to match the clusterrole created by the cilium helm chart. |
||
|---|---|---|
| .. | ||
| 000-cilium-portmap.conflist.j2 | ||
| cilium-config.yml.j2 | ||
| cilium-cr.yml.j2 | ||
| cilium-crb.yml.j2 | ||
| cilium-deploy.yml.j2 | ||
| cilium-ds.yml.j2 | ||
| cilium-sa.yml.j2 | ||
| cilium-secret.yml.j2 | ||