From 641fb87a1319c36ffa84129ee141179bdc70eddf Mon Sep 17 00:00:00 2001 From: Yuriy Taraday Date: Thu, 10 Jan 2019 16:02:45 +0400 Subject: [PATCH] Grant provider access to status subresource in clusters (#177) Currently when provider tries to update cluster status, it gets error: User "system:serviceaccount:openstack-provider-system:default" cannot update resource "clusters/status" in API group "cluster.k8s.io" in the namespace "default" This happens because "status" is separate subresource and access to it must be granted separately. --- config/rbac/rbac_role.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/config/rbac/rbac_role.yaml b/config/rbac/rbac_role.yaml index 9beb9602290..d5975dad69c 100644 --- a/config/rbac/rbac_role.yaml +++ b/config/rbac/rbac_role.yaml @@ -19,6 +19,7 @@ rules: - cluster.k8s.io resources: - clusters + - clusters/status - machines - machinedeployments - machinesets