robbrockbank / calico-etcd-rbac-certs

Testing out setting up etcd with RBAC and running Calico and Kubernetes

Path access allowances for Calico with Kubernetes

calico-node

Path	Read	Write
/calico/v1/config
/calico/v1/host
/calico/v1/policy
/calico/v1/ipam
/calico/ipam/v2/assignment
/calico/ipam/v2/handle
/calico/ipam/v2/host
/calico/bgp/v1/global
/calico/bgp/v1/host

cni

Path	Read	Write
/calico/v1/config
/calico/v1/host
/calico/v1/policy
/calico/v1/ipam
/calico/ipam/v2/assignment
/calico/ipam/v2/handle
/calico/ipam/v2/host
/calico/bgp/v1/global
/calico/bgp/v1/host

policy-controller

Path	Read	Write
/calico/v1/config
/calico/v1/host
/calico/v1/policy
/calico/v1/ipam
/calico/ipam/v2/assignment
/calico/ipam/v2/handle
/calico/ipam/v2/host
/calico/bgp/v1/global
/calico/bgp/v1/host