Skip to content

Commit 6e2ed26

Browse files
committed
Update RBAC rules for external provisioner and attacher to the updated roles required based on upstream repositories
1 parent 661cea9 commit 6e2ed26

File tree

1 file changed

+15
-6
lines changed

1 file changed

+15
-6
lines changed

deploy/kubernetes/base/setup-cluster.yaml

+15-6
Original file line numberDiff line numberDiff line change
@@ -54,12 +54,21 @@ rules:
5454
- apiGroups: ["storage.k8s.io"]
5555
resources: ["storageclasses"]
5656
verbs: ["get", "list", "watch"]
57+
- apiGroups: [""]
58+
resources: ["events"]
59+
verbs: ["list", "watch", "create", "update", "patch"]
60+
- apiGroups: ["snapshot.storage.k8s.io"]
61+
resources: ["volumesnapshots"]
62+
verbs: ["get", "list"]
63+
- apiGroups: ["snapshot.storage.k8s.io"]
64+
resources: ["volumesnapshotcontents"]
65+
verbs: ["get", "list"]
5766
- apiGroups: ["storage.k8s.io"]
5867
resources: ["csinodes"]
5968
verbs: ["get", "list", "watch"]
6069
- apiGroups: [""]
61-
resources: ["events"]
62-
verbs: ["list", "watch", "create", "update", "patch"]
70+
resources: ["nodes"]
71+
verbs: ["get", "list", "watch"]
6372

6473
---
6574

@@ -85,16 +94,16 @@ metadata:
8594
rules:
8695
- apiGroups: [""]
8796
resources: ["persistentvolumes"]
88-
verbs: ["get", "list", "watch", "update"]
97+
verbs: ["get", "list", "watch", "update", "patch"]
8998
- apiGroups: [""]
9099
resources: ["nodes"]
91100
verbs: ["get", "list", "watch"]
92-
- apiGroups: ["csi.storage.k8s.io"]
93-
resources: ["csinodeinfos"]
101+
- apiGroups: ["storage.k8s.io"]
102+
resources: ["csinodes"]
94103
verbs: ["get", "list", "watch"]
95104
- apiGroups: ["storage.k8s.io"]
96105
resources: ["volumeattachments"]
97-
verbs: ["get", "list", "watch", "update"]
106+
verbs: ["get", "list", "watch", "update", "patch"]
98107

99108
---
100109

0 commit comments

Comments
 (0)