mirror of https://github.com/kubernetes/kops.git
				
				
				
			Add events RBAC permissions to kops-controller
I noticed in our new kops-controller logs that there is a permission denied error at startup. Apparently part of the leader election process involves creating and watching for events off of the kops-controller-leader configmap. This will add the necessary permissions to silence this error. https://storage.googleapis.com/kubernetes-jenkins/logs/ci-kubernetes-e2e-kops-aws/1227728236914413570/artifacts/ip-172-20-46-137.ap-northeast-2.compute.internal/kops-controller-6k9sz.log
This commit is contained in:
		
							parent
							
								
									cbee4dccba
								
							
						
					
					
						commit
						5ea96fa6a0
					
				| 
						 | 
					@ -139,6 +139,15 @@ metadata:
 | 
				
			||||||
  name: kops-controller
 | 
					  name: kops-controller
 | 
				
			||||||
  namespace: kube-system
 | 
					  namespace: kube-system
 | 
				
			||||||
rules:
 | 
					rules:
 | 
				
			||||||
 | 
					- apiGroups:
 | 
				
			||||||
 | 
					  - ""
 | 
				
			||||||
 | 
					  resources:
 | 
				
			||||||
 | 
					  - events
 | 
				
			||||||
 | 
					  verbs:
 | 
				
			||||||
 | 
					  - get
 | 
				
			||||||
 | 
					  - list
 | 
				
			||||||
 | 
					  - watch
 | 
				
			||||||
 | 
					  - create
 | 
				
			||||||
- apiGroups:
 | 
					- apiGroups:
 | 
				
			||||||
  - ""
 | 
					  - ""
 | 
				
			||||||
  resources:
 | 
					  resources:
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -7,7 +7,7 @@ spec:
 | 
				
			||||||
  - id: k8s-1.16
 | 
					  - id: k8s-1.16
 | 
				
			||||||
    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
					    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
				
			||||||
    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
					    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
				
			||||||
    manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
 | 
					    manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
 | 
				
			||||||
    name: kops-controller.addons.k8s.io
 | 
					    name: kops-controller.addons.k8s.io
 | 
				
			||||||
    selector:
 | 
					    selector:
 | 
				
			||||||
      k8s-addon: kops-controller.addons.k8s.io
 | 
					      k8s-addon: kops-controller.addons.k8s.io
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -121,6 +121,15 @@ metadata:
 | 
				
			||||||
  name: kops-controller
 | 
					  name: kops-controller
 | 
				
			||||||
  namespace: kube-system
 | 
					  namespace: kube-system
 | 
				
			||||||
rules:
 | 
					rules:
 | 
				
			||||||
 | 
					- apiGroups:
 | 
				
			||||||
 | 
					  - ""
 | 
				
			||||||
 | 
					  resources:
 | 
				
			||||||
 | 
					  - events
 | 
				
			||||||
 | 
					  verbs:
 | 
				
			||||||
 | 
					  - get
 | 
				
			||||||
 | 
					  - list
 | 
				
			||||||
 | 
					  - watch
 | 
				
			||||||
 | 
					  - create
 | 
				
			||||||
- apiGroups:
 | 
					- apiGroups:
 | 
				
			||||||
  - ""
 | 
					  - ""
 | 
				
			||||||
  resourceNames:
 | 
					  resourceNames:
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -7,7 +7,7 @@ spec:
 | 
				
			||||||
  - id: k8s-1.16
 | 
					  - id: k8s-1.16
 | 
				
			||||||
    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
					    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
				
			||||||
    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
					    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
				
			||||||
    manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
 | 
					    manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
 | 
				
			||||||
    name: kops-controller.addons.k8s.io
 | 
					    name: kops-controller.addons.k8s.io
 | 
				
			||||||
    selector:
 | 
					    selector:
 | 
				
			||||||
      k8s-addon: kops-controller.addons.k8s.io
 | 
					      k8s-addon: kops-controller.addons.k8s.io
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -121,6 +121,15 @@ metadata:
 | 
				
			||||||
  name: kops-controller
 | 
					  name: kops-controller
 | 
				
			||||||
  namespace: kube-system
 | 
					  namespace: kube-system
 | 
				
			||||||
rules:
 | 
					rules:
 | 
				
			||||||
 | 
					- apiGroups:
 | 
				
			||||||
 | 
					  - ""
 | 
				
			||||||
 | 
					  resources:
 | 
				
			||||||
 | 
					  - events
 | 
				
			||||||
 | 
					  verbs:
 | 
				
			||||||
 | 
					  - get
 | 
				
			||||||
 | 
					  - list
 | 
				
			||||||
 | 
					  - watch
 | 
				
			||||||
 | 
					  - create
 | 
				
			||||||
- apiGroups:
 | 
					- apiGroups:
 | 
				
			||||||
  - ""
 | 
					  - ""
 | 
				
			||||||
  resourceNames:
 | 
					  resourceNames:
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -7,7 +7,7 @@ spec:
 | 
				
			||||||
  - id: k8s-1.16
 | 
					  - id: k8s-1.16
 | 
				
			||||||
    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
					    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
				
			||||||
    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
					    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
				
			||||||
    manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
 | 
					    manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
 | 
				
			||||||
    name: kops-controller.addons.k8s.io
 | 
					    name: kops-controller.addons.k8s.io
 | 
				
			||||||
    selector:
 | 
					    selector:
 | 
				
			||||||
      k8s-addon: kops-controller.addons.k8s.io
 | 
					      k8s-addon: kops-controller.addons.k8s.io
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -7,7 +7,7 @@ spec:
 | 
				
			||||||
  - id: k8s-1.16
 | 
					  - id: k8s-1.16
 | 
				
			||||||
    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
					    kubernetesVersion: '>=1.16.0-alpha.0'
 | 
				
			||||||
    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
					    manifest: kops-controller.addons.k8s.io/k8s-1.16.yaml
 | 
				
			||||||
    manifestHash: 827a984420c7b24204f7713717b8ebc2a6f63db3
 | 
					    manifestHash: 9c35881670887d269f0eac0fa1f0c20509e6a8bb
 | 
				
			||||||
    name: kops-controller.addons.k8s.io
 | 
					    name: kops-controller.addons.k8s.io
 | 
				
			||||||
    selector:
 | 
					    selector:
 | 
				
			||||||
      k8s-addon: kops-controller.addons.k8s.io
 | 
					      k8s-addon: kops-controller.addons.k8s.io
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue