Modify cfo cluster role permissions
This is requried for it work in Kubenerets 1.18.2
@@ -9,7 +9,6 @@ rules:
- certificates.k8s.io
resources:
- certificatesigningrequests
- - signers
verbs:
- approve
- create
@@ -18,6 +17,15 @@ rules:
- update
- watch
+- apiGroups:
+ - certificates.k8s.io
+ resources:
+ - signers
+ resourceNames:
+ - kubernetes.io/legacy-unknown
+ verbs:
+ - approve
+
- apiGroups:
- ""
resources:
