Add endpoints list and watch permission for controller-manager (#590)

Signed-off-by: Aylei <[email protected]>
pingcap · Jun 18, 2019 · b9fb5eb · b9fb5eb
1 parent ddcb27c
commit b9fb5eb
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/charts/tidb-operator/templates/controller-manager-rbac.yaml b/charts/tidb-operator/templates/controller-manager-rbac.yaml
@@ -29,7 +29,7 @@ rules:
   verbs: ["*"]
 - apiGroups: [""]
   resources: ["endpoints"]
-  verbs: ["create", "get", "update"]
+  verbs: ["create", "get", "list", "watch", "update"]
 - apiGroups: [""]
   resources: ["persistentvolumeclaims"]
   verbs: ["get", "list", "watch", "update", "delete"]
@@ -88,7 +88,7 @@ rules:
   verbs: ["*"]
 - apiGroups: [""]
   resources: ["endpoints"]
-  verbs: ["create", "get", "update"]
+  verbs: ["create", "get", "list", "watch", "update"]
 - apiGroups: [""]
   resources: ["persistentvolumeclaims"]
   verbs: ["get", "list", "watch", "update", "delete"]