From 2bfdaadfdefd72463489fffed734b973fd506afc Mon Sep 17 00:00:00 2001
From: Jing Ai <jinga@google.com>
Date: Fri, 14 Sep 2018 15:44:07 -0700
Subject: [PATCH] Add serviceaccounts permission for ClusterRole, required by
 Calico v3.2.0+.

---
 cluster/addons/calico-policy-controller/calico-clusterrole.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cluster/addons/calico-policy-controller/calico-clusterrole.yaml b/cluster/addons/calico-policy-controller/calico-clusterrole.yaml
index 0e3f406091e..b1b83498d8a 100644
--- a/cluster/addons/calico-policy-controller/calico-clusterrole.yaml
+++ b/cluster/addons/calico-policy-controller/calico-clusterrole.yaml
@@ -10,6 +10,7 @@ rules:
   - apiGroups: [""]
     resources:
       - namespaces
+      - serviceaccounts
     verbs:
       - get
       - list