Always create service account even rbac_enabled = false

2026-03-09 19:58:07 +03:00 · 2018-08-22 11:41:29 +08:00
parent 7398858572
commit c3b3572025
34 changed files with 3 additions and 78 deletions
--- a/roles/network_plugin/calico/templates/calico-node.yml.j2
+++ b/roles/network_plugin/calico/templates/calico-node.yml.j2
@@ -22,9 +22,7 @@ spec:
        kubespray.etcd-cert/serial: "{{ etcd_client_cert_serial }}"
    spec:
      hostNetwork: true
-{% if rbac_enabled %}
      serviceAccountName: calico-node
-{% endif %}
      tolerations:
        - effect: NoSchedule
          operator: Exists