From 06496a4bebd271dfcd02528fa0cc593950f9d9a7 Mon Sep 17 00:00:00 2001 From: liuwei Date: Wed, 4 Nov 2020 10:29:53 +0800 Subject: [PATCH] add metrics permissions --- deploy/hub/hub_controller_clusterrole.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/deploy/hub/hub_controller_clusterrole.yaml b/deploy/hub/hub_controller_clusterrole.yaml index 4ef35f418..0b8900a15 100644 --- a/deploy/hub/hub_controller_clusterrole.yaml +++ b/deploy/hub/hub_controller_clusterrole.yaml @@ -50,3 +50,10 @@ rules: - apiGroups: ["cluster.open-cluster-management.io"] resources: ["managedclustersets/status"] verbs: ["update", "patch"] + # Allow to access metrics API +- apiGroups: ["authentication.k8s.io"] + resources: ["tokenreviews"] + verbs: ["create"] +- apiGroups: ["authorization.k8s.io"] + resources: ["subjectaccessreviews"] + verbs: ["create"]