From 3b9c893bae0be203d482957e4a02ce1c35cec44e Mon Sep 17 00:00:00 2001
From: Jesse Haka <haka.jesse@gmail.com>
Date: Mon, 3 May 2021 16:01:57 +0300
Subject: [PATCH] add permission to create sa tokens

---
 .../addons/openstack.addons.k8s.io/k8s-1.13.yaml.template   | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template b/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template
index 8923b08336..c6185405d2 100644
--- a/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template
+++ b/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template
@@ -85,6 +85,12 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - serviceaccounts/token
+  verbs:
+  - create
 - apiGroups:
   - ""
   resources: