Allow config watchers to create events in ns/metallb-system.
This allows metallb binaries to post config errors as events on the
configmap.
@@ -52,6 +52,11 @@ rules:
- apiGroups: [""]
resources: ["configmaps"]
verbs: ["get", "list", "watch"]
+- # Allow creating events in the metallb-system namespace
+ # so that watchers can post config errors.
+ apiGroups: [""]
+ resources: ["events"]
+ verbs: ["create"]
---
## Service accounts
