add patch permission for cni clusterrole

Signed-off-by: 马洪贞 <hzma@alauda.io>
kubeovn · Apr 28, 2024 · 954df53 · 954df53
1 parent db7ea0c
commit 954df53
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 6 deletions.
diff --git a/charts/kube-ovn/templates/ovn-CR.yaml b/charts/kube-ovn/templates/ovn-CR.yaml
@@ -195,11 +195,9 @@ metadata:
 rules:
   - apiGroups:
       - "kubeovn.io"
-      - ""
     resources:
       - subnets
       - provider-networks
-      - pods
     verbs:
       - get
       - list
@@ -211,6 +209,7 @@ rules:
       - ovn-eips
       - ovn-eips/status
       - nodes
+      - pods
     verbs:
       - get
       - list

diff --git a/dist/images/install.sh b/dist/images/install.sh
@@ -3053,11 +3053,9 @@ metadata:
 rules:
   - apiGroups:
       - "kubeovn.io"
-      - ""
     resources:
       - subnets
       - provider-networks
-      - pods
     verbs:
       - get
       - list
@@ -3069,6 +3067,7 @@ rules:
       - ovn-eips
       - ovn-eips/status
       - nodes
+      - pods
     verbs:
       - get
       - list

diff --git a/yamls/sa.yaml b/yamls/sa.yaml
@@ -238,11 +238,9 @@ metadata:
 rules:
   - apiGroups:
       - "kubeovn.io"
-      - ""
     resources:
       - subnets
       - provider-networks
-      - pods
     verbs:
       - get
       - list
@@ -254,6 +252,7 @@ rules:
       - ovn-eips
       - ovn-eips/status
       - nodes
+      - pods
     verbs:
       - get
       - list