Skip to content
Snippets Groups Projects
Verified Commit 7acfc1d1 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

fix(system-upgrade): Fix permissions for system-upgrade-controller-drainer

parent bf4af418
No related branches found
No related tags found
No related merge requests found
......@@ -68,22 +68,35 @@ metadata:
name: system-upgrade-controller-drainer
rules:
# Needed to evict pods
- apiGroups: [""]
resources: ["pods/eviction"]
verbs: ["create"]
- apiGroups:
- ""
resources:
- "pods/eviction"
verbs:
- "create"
# Needed to list pods by Node
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "list"]
- apiGroups:
- ""
resources:
- "pods"
verbs:
- "get"
- "list"
# Needed to cordon Nodes
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get", "patch"]
- apiGroups:
- ""
resources:
- "nodes"
verbs:
- "get"
- "patch"
# Needed to determine Pod owners
- apiGroups: ["apps"]
resources: ["statefulsets"]
verbs: ["get", "list"]
# Needed to determine Pod owners
- apiGroups: ["extensions"]
resources: ["daemonsets", "replicasets"]
verbs: ["get", "list"]
- apiGroups:
- "apps"
resources:
- "statefulsets"
- "daemonsets"
- "replicasets"
verbs:
- "get"
- "list"
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment