Update antrea-agent ClusterRole manifest to update Pod annotation

Signed-off-by: Wenqi Qiu <[email protected]>

Author: wenqiq

build/charts/antrea/templates/agent/clusterrole.yaml

@@ -39,6 +39,7 @@ rules:
       - pods/status
     verbs:
       - patch
+      - update
   - apiGroups:
       - ""
     resources:

build/yamls/antrea-aks.yml

@@ -4620,6 +4620,7 @@ rules:
       - pods/status
     verbs:
       - patch
+      - update
   - apiGroups:
       - ""
     resources:

build/yamls/antrea-eks.yml

@@ -4620,6 +4620,7 @@ rules:
       - pods/status
     verbs:
       - patch
+      - update
   - apiGroups:
       - ""
     resources:

build/yamls/antrea-gke.yml

@@ -4620,6 +4620,7 @@ rules:
       - pods/status
     verbs:
       - patch
+      - update
   - apiGroups:
       - ""
     resources:

build/yamls/antrea-ipsec.yml

@@ -4633,6 +4633,7 @@ rules:
       - pods/status
     verbs:
       - patch
+      - update
   - apiGroups:
       - ""
     resources:

build/yamls/antrea.yml

@@ -4620,6 +4620,7 @@ rules:
       - pods/status
     verbs:
       - patch
+      - update
   - apiGroups:
       - ""
     resources:

pkg/agent/secondarynetwork/podwatch/controller.go

@@ -481,10 +481,11 @@ func (pc *PodController) configurePodSecondaryNetwork(pod *corev1.Pod, networkLi
 
 	// update Pod annotation
 	if netStatus != nil {
-		klog.InfoS("Update Pod annotation", "NetworkStatus", netStatus)
 		if err := netdefutils.SetNetworkStatus(pc.kubeClient, pod, netStatus); err != nil {
+			klog.ErrorS(err, "Update Pod annotation failed", "Pod", klog.KRef(pod.Namespace, pod.Name))
 			return err
 		}
+		klog.InfoS("Update Pod annotation successfully", "Pod", klog.KRef(pod.Namespace, pod.Name), "NetworkStatus", netStatus)
 	}
 	return nil
 }