From be9ce37fe2839e663e68fb97ac003f2aec45dec3 Mon Sep 17 00:00:00 2001
From: Pedro Coutinho <pedro@tigera.io>
Date: Thu, 29 Jul 2021 13:48:49 -0700
Subject: [PATCH] Add clusterinformations 'get' permissions to operator for
 openshift

---
 .../templates/tigera-operator/02-role-tigera-operator.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/_includes/charts/tigera-operator/templates/tigera-operator/02-role-tigera-operator.yaml b/_includes/charts/tigera-operator/templates/tigera-operator/02-role-tigera-operator.yaml
index 9355d65fa55..c3576460270 100644
--- a/_includes/charts/tigera-operator/templates/tigera-operator/02-role-tigera-operator.yaml
+++ b/_includes/charts/tigera-operator/templates/tigera-operator/02-role-tigera-operator.yaml
@@ -225,6 +225,13 @@ rules:
       - ipamblocks
     verbs:
       - list
+  # Need this permission for the calicoctl version mismatch checking
+  - apiGroups:
+      - crd.projectcalico.org
+    resources:
+      - clusterinformations
+    verbs:
+      - get
   # For AWS security group setup.
   - apiGroups:
       - batch