FIX: missing patch pod permission (#81)

getamis · Dec 25, 2023 · 4c0d5c7 · 4c0d5c7
1 parent da7b023
commit 4c0d5c7
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/templates/network-plugins/amazon-vpc/aws-vpc-cni.yaml.tpl b/templates/network-plugins/amazon-vpc/aws-vpc-cni.yaml.tpl
@@ -308,6 +308,12 @@ rules:
     resources:
       - pods
     verbs: ["list", "watch", "get"]
+%{ if annotate_pod_ip == true ~}
+  - apiGroups: [""]
+    resources:
+      - pods
+    verbs: ["patch"]
+-%{ endif ~}
   - apiGroups: [""]
     resources:
       - nodes