Add RBAC permissions for netchecker server in kube-addons.sls
Additional fix for 8e59a7a (https://gerrit.mcp.mirantis.net/13235)
Change-Id: Ifa03759a2cdacfbaf7722346e7d0c324b4a10487
diff --git a/kubernetes/master/kube-addons.sls b/kubernetes/master/kube-addons.sls
index e7454a5..3682b43 100644
--- a/kubernetes/master/kube-addons.sls
+++ b/kubernetes/master/kube-addons.sls
@@ -84,7 +84,15 @@
{%- if common.addons.get('netchecker', {'enabled': False}).enabled %}
-{%- for resource in ['svc', 'server', 'agent'] %}
+{%- set netchecker_resources = ['svc', 'server', 'agent'] %}
+
+{%- if 'RBAC' in master.auth.get('mode', "") %}
+
+{%- set netchecker_resources = netchecker_resources + ['roles'] %}
+
+{%- endif %}
+
+{%- for resource in netchecker_resources %}
/etc/kubernetes/addons/netchecker/netchecker-{{ resource }}.yml:
file.managed: