Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • v2.28.0
  • v2.27.0
  • v2.25.1
  • v2.24.3
  • v2.26.0
  • v2.24.2
  • v2.25.0
  • v2.24.1
  • v2.22.2
  • v2.23.3
  • v2.24.0
  • v2.23.2
  • v2.23.1
  • v2.23.0
  • v2.22.1
  • v2.22.0
  • v2.21.0
  • v2.20.0
  • v2.19.1
  • v2.18.2
21 results

kubespray

  • Clone with SSH
  • Clone with HTTPS
  • user avatar
    Frank Ritchie authored
    When upgrading cilium from 1.8.8 to 1.9.5 I ran into the following
    error:
    
    level=error msg="Unable to update CRD" error="customresourcedefinitions.apiextensions.k8s.io
    \"ciliumnodes.cilium.io\" is forbidden: User \"system:serviceaccount:kube-system:cilium-operator\"
    cannot update resource \"customresourcedefinitions\" in API group \"apiextensions.k8s.io\" at the
    cluster scope" name=CiliumNode/v2 subsys=k8s
    
    The fix was to add the update verb to the clusterrole. I also added
    create to match the clusterrole created by the cilium helm chart.
    5b0e8833
    History
    Name Last commit Last update