Add user "etcd" to role "root" so that the default tls client works

Quentin-M · Aug 25, 2021 · e7ab44b · e7ab44b
1 parent ac1d785
commit e7ab44b
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/pkg/operator/acl.go b/pkg/operator/acl.go
@@ -213,6 +213,14 @@ func (s *Operator) enableACL(ctx context.Context, config *etcd.ACLConfig) error
 		return err
 	}
 
+	if _, err := s.etcdClient.UserAddWithOptions(ctx, "etcd", "", &clientv3.UserAddOptions{NoPassword: true}); err != nil {
+			return err
+	}
+
+	if _, err := s.etcdClient.UserGrantRole(ctx, "etcd", "root"); err != nil {
+			return err
+	}
+
 	if _, err := s.etcdClient.AuthEnable(ctx); err != nil {
 		return err
 	}