From 5f370e9bc6decc10939b0094b35d83b58ed29741 Mon Sep 17 00:00:00 2001 From: Yecheng Fu Date: Thu, 27 Jun 2019 14:34:09 +0800 Subject: [PATCH] Give kube-scheduler ability to update/patch pod status. --- charts/tidb-operator/templates/scheduler-rbac.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/charts/tidb-operator/templates/scheduler-rbac.yaml b/charts/tidb-operator/templates/scheduler-rbac.yaml index 6901fe714b1..433aae7d015 100644 --- a/charts/tidb-operator/templates/scheduler-rbac.yaml +++ b/charts/tidb-operator/templates/scheduler-rbac.yaml @@ -28,6 +28,9 @@ rules: - apiGroups: [""] resources: ["pods/binding"] verbs: ["create"] +- apiGroups: [""] + resources: ["pods/status"] + verbs: ["patch", "update"] - apiGroups: [""] resources: ["endpoints", "events"] verbs: ["get", "list", "watch", "create", "update", "patch"] @@ -94,6 +97,9 @@ rules: - apiGroups: [""] resources: ["pods/binding"] verbs: ["create"] +- apiGroups: [""] + resources: ["pods/status"] + verbs: ["patch", "update"] - apiGroups: [""] resources: ["endpoints", "events"] verbs: ["get", "list", "watch", "create", "update", "patch"]