From f019d2947e3c3865fc45b0b1bc1fa0f91728556a Mon Sep 17 00:00:00 2001 From: Aylei Date: Mon, 17 Jun 2019 22:58:43 +0800 Subject: [PATCH] Add endpoints list and watch permission for controller-manager Signed-off-by: Aylei --- charts/tidb-operator/templates/controller-manager-rbac.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/tidb-operator/templates/controller-manager-rbac.yaml b/charts/tidb-operator/templates/controller-manager-rbac.yaml index cc5d9ba19c..e91ef1818d 100644 --- a/charts/tidb-operator/templates/controller-manager-rbac.yaml +++ b/charts/tidb-operator/templates/controller-manager-rbac.yaml @@ -29,7 +29,7 @@ rules: verbs: ["*"] - apiGroups: [""] resources: ["endpoints"] - verbs: ["create", "get", "update"] + verbs: ["create", "get", "list", "watch", "update"] - apiGroups: [""] resources: ["persistentvolumeclaims"] verbs: ["get", "list", "watch", "update", "delete"] @@ -88,7 +88,7 @@ rules: verbs: ["*"] - apiGroups: [""] resources: ["endpoints"] - verbs: ["create", "get", "update"] + verbs: ["create", "get", "list", "watch", "update"] - apiGroups: [""] resources: ["persistentvolumeclaims"] verbs: ["get", "list", "watch", "update", "delete"]