Virt-api should use apiserver SA instead of controller SA
@@ -173,6 +173,14 @@ metadata:
labels:
kubevirt.io: ""
rules:
+ - apiGroups:
+ - admissionregistration.k8s.io
+ resources:
+ - validatingwebhookconfigurations
+ verbs:
+ - get
+ - create
+ - update
- apiGroups:
- apiregistration.k8s.io
resources:
@@ -386,7 +394,7 @@ spec:
labels:
kubevirt.io: virt-api
spec:
- serviceAccountName: kubevirt-controller
+ serviceAccountName: kubevirt-apiserver
containers:
- name: virt-api
image: {{.DockerPrefix}}/virt-api:{{.DockerTag}}
