Fix CSR approval on kubernetes-1.18.0 version (#26)

Signed-off-by: Alex Szakaly <[email protected]>
kontena · Apr 4, 2020 · f7a5a43 · f7a5a43
1 parent 33a7f96
commit f7a5a43
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/deploy/role.yaml b/deploy/role.yaml
@@ -3,12 +3,21 @@ kind: ClusterRole
 metadata:
   name: kubelet-rubber-stamp
 rules:
+- apiGroups:
+  - certificates.k8s.io
+  resources:
+  - signers
+  # legacy-unknown: support before kubernetes-1.18.0
+  resourceNames:
+  - "kubernetes.io/legacy-unknown"
+  - "kubernetes.io/kubelet-serving"
+  verbs:
+  - approve
 - apiGroups:
   - certificates.k8s.io
   resources:
   - certificatesigningrequests
   verbs:
-  - delete
   - get
   - list
   - watch