| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091 |
- kind: ClusterRole
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: calico
- namespace: kube-system
- labels:
- kubernetes.io/cluster-service: "true"
- addonmanager.kubernetes.io/mode: Reconcile
- rules:
- - apiGroups: [""]
- resources:
- - namespaces
- - serviceaccounts
- verbs:
- - get
- - list
- - watch
- - apiGroups: [""]
- resources:
- - endpoints
- verbs:
- - get
- - apiGroups: [""]
- resources:
- - services
- verbs:
- - get
- - apiGroups: [""]
- resources:
- - pods/status
- verbs:
- - update
- - patch
- - apiGroups: [""]
- resources:
- - nodes
- verbs:
- - get
- - list
- - update
- - watch
- - apiGroups: ["networking.k8s.io"]
- resources:
- - networkpolicies
- verbs:
- - watch
- - list
- - apiGroups: ["crd.projectcalico.org"]
- resources:
- - felixconfigurations
- - bgppeers
- - bgpconfigurations
- - ippools
- - globalnetworkpolicies
- - globalnetworksets
- - networkpolicies
- - clusterinformations
- - hostendpoints
- verbs:
- - create
- - get
- - list
- - update
- - watch
- # Used in Calico v2.6 only - can be removed after upgrade.
- - apiGroups: [""]
- resources:
- - pods
- verbs:
- - get
- - list
- - watch
- - patch
- - apiGroups: ["crd.projectcalico.org"]
- resources:
- - globalfelixconfigs
- - globalbgpconfigs
- verbs:
- - create
- - get
- - list
- - update
- - watch
- - apiGroups: ["extensions"]
- resources:
- - networkpolicies
- verbs:
- - get
- - list
- - watch
|
