DevStack: Allow kuryr-cni SA to create Events
Permissions to create Events was added to the kuryr-controller
ServiceAccount, but not to the kuryr-cni one. This commit fixes this,
allowing kuryr-daemon to create Events in DevStack.
@@ -478,6 +478,11 @@ rules:
verbs: ["*"]
resources:
- kuryrports
+- apiGroups: ["", "events.k8s.io"]
+ resources:
+ - events
+ verbs:
+ - create
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
