adding permission to CNO RBAC Calico path for network-node-identity d…

…eploy
bryan-cox · Nov 7, 2023 · 3dabd46 · 3dabd46
1 parent e2801bd
commit 3dabd46
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/control-plane-operator/controllers/hostedcontrolplane/cno/clusternetworkoperator.go b/control-plane-operator/controllers/hostedcontrolplane/cno/clusternetworkoperator.go
@@ -152,6 +152,20 @@ func ReconcileRole(role *rbacv1.Role, ownerRef config.OwnerRef, networkType hype
 					"watch",
 				},
 			},
+			{
+				APIGroups: []string{corev1.SchemeGroupVersion.Group},
+				Resources: []string{
+					"configmaps",
+				},
+				ResourceNames: []string{
+					"ovnkube-identity-cm",
+				},
+				Verbs: []string{
+					"create",
+					"patch",
+					"update",
+				},
+			},
 			{
 				APIGroups: []string{appsv1.SchemeGroupVersion.Group},
 				Resources: []string{"statefulsets", "deployments"},
@@ -162,6 +176,7 @@ func ReconcileRole(role *rbacv1.Role, ownerRef config.OwnerRef, networkType hype
 				Resources: []string{"deployments"},
 				ResourceNames: []string{
 					"multus-admission-controller",
+					"network-node-identity",
 				},
 				Verbs: []string{"*"},
 			},
@@ -170,6 +185,7 @@ func ReconcileRole(role *rbacv1.Role, ownerRef config.OwnerRef, networkType hype
 				Resources: []string{"services"},
 				ResourceNames: []string{
 					"multus-admission-controller",
+					"network-node-identity",
 				},
 				Verbs: []string{"*"},
 			},