commit e55493f6358b334d218bc870ee233d92991bb9e8
author Sergiusz Bazanski <q3k@hackerspace.pl> Sat May 30 17:57:05 2020 +0200
committer Sergiusz Bazanski <q3k@hackerspace.pl> Sat May 30 17:57:05 2020 +0200
tree c5569be4bc4a2f38cf9ffe2c35fc12283c227ac4
parent ba375e62b2d5c27a545c6ea43b37d303740755a6

calico: fix access to resources from controller

This fixes even more networking issues.

Change-Id: I754656a01e3de8a34055280908b343a1a25a4707

cluster/kube/lib/calico.libsonnet

diff --git a/cluster/kube/lib/calico.libsonnet b/cluster/kube/lib/calico.libsonnet
index d0188e0..b5c83a7 100644
--- a/cluster/kube/lib/calico.libsonnet
+++ b/cluster/kube/lib/calico.libsonnet
@@ -170,15 +170,10 @@
             rules: [
                 {
                     apiGroups: [""],
-                    resources: ["nodes"],
+                    resources: ["nodes", "pods", "namespaces", "serviceaccounts"],
                     verbs: ["watch", "list", "get"],
                 },
                 {
-                    apiGroups: [""],
-                    resources: ["pods"],
-                    verbs: ["get"],
-                },
-                {
                     apiGroups: ["networking.k8s.io"],
                     resources: ["networkpolicies"],
                     verbs: ["watch", "list"],