Add events RBAC permissions to kops-controller

I noticed in our new kops-controller logs that there is a permission denied error at startup.

Apparently part of the leader election process involves creating and watching for events off of the kops-controller-leader configmap.
This will add the necessary permissions to silence this error.

https://storage.googleapis.com/kubernetes-jenkins/logs/ci-kubernetes-e2e-kops-aws/1227728236914413570/artifacts/ip-172-20-46-137.ap-northeast-2.compute.internal/kops-controller-6k9sz.log
This commit is contained in:
Peter Rifel 2020-02-12 18:34:19 -06:00
parent cbee4dccba
commit 5ea96fa6a0
7 changed files with 31 additions and 4 deletions

View File

@ -139,6 +139,15 @@ metadata:
name: kops-controller
namespace: kube-system
rules:
- apiGroups:
- ""
resources:
- events
verbs:
- get
- list
- watch
- create
- apiGroups:
- ""
resources:

View File

@ -7,7 +7,7 @@ spec:
- id: k8s-1.16
kubernetesVersion: '>=1.16.0-alpha.0'
manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
name: kops-controller.addons.k8s.io
selector:
k8s-addon: kops-controller.addons.k8s.io

View File

@ -121,6 +121,15 @@ metadata:
name: kops-controller
namespace: kube-system
rules:
- apiGroups:
- ""
resources:
- events
verbs:
- get
- list
- watch
- create
- apiGroups:
- ""
resourceNames:

View File

@ -7,7 +7,7 @@ spec:
- id: k8s-1.16
kubernetesVersion: '>=1.16.0-alpha.0'
manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
name: kops-controller.addons.k8s.io
selector:
k8s-addon: kops-controller.addons.k8s.io

View File

@ -121,6 +121,15 @@ metadata:
name: kops-controller
namespace: kube-system
rules:
- apiGroups:
- ""
resources:
- events
verbs:
- get
- list
- watch
- create
- apiGroups:
- ""
resourceNames:

View File

@ -7,7 +7,7 @@ spec:
- id: k8s-1.16
kubernetesVersion: '>=1.16.0-alpha.0'
manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
name: kops-controller.addons.k8s.io
selector:
k8s-addon: kops-controller.addons.k8s.io

View File

@ -7,7 +7,7 @@ spec:
- id: k8s-1.16
kubernetesVersion: '>=1.16.0-alpha.0'
manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
name: kops-controller.addons.k8s.io
selector:
k8s-addon: kops-controller.addons.k8s.io