From fe6f2c8b742a61c2156c777bd94579637b9f508a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82=20Dulko?= <mdulko@redhat.com>
Date: Thu, 23 Dec 2021 10:54:52 +0100
Subject: [PATCH] DevStack: Allow kuryr-cni SA to create Events

Permissions to create Events was added to the kuryr-controller
ServiceAccount, but not to the kuryr-cni one. This commit fixes this,
allowing kuryr-daemon to create Events in DevStack.

Change-Id: I59a9de2f6cd3314b1326c43c4c1eefa8e445b9ee
---
 devstack/lib/kuryr_kubernetes | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/devstack/lib/kuryr_kubernetes b/devstack/lib/kuryr_kubernetes
index c44bea61c..4948bc34e 100644
--- a/devstack/lib/kuryr_kubernetes
+++ b/devstack/lib/kuryr_kubernetes
@@ -478,6 +478,11 @@ rules:
   verbs: ["*"]
   resources:
     - kuryrports
+- apiGroups: ["", "events.k8s.io"]
+  resources:
+  - events
+  verbs:
+  - create
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1