From 1fb6d8f891f7414ee5ba4520d2077aeea9a73c1e Mon Sep 17 00:00:00 2001 From: Jan Nemcik Date: Tue, 5 Dec 2023 18:05:11 +0100 Subject: [PATCH] helm: update node plugin cluster role added permission to get nodes for rbd and cephfs nodeplugin daemonset Signed-off-by: Jan Nemcik --- charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml | 2 -- charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml | 2 -- 2 files changed, 4 deletions(-) diff --git a/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml b/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml index e425f1840..ec61a6713 100644 --- a/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml +++ b/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml @@ -11,9 +11,7 @@ metadata: heritage: {{ .Release.Service }} {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }} rules: -{{- if and .Values.readAffinity .Values.readAffinity.enabled }} - apiGroups: [""] resources: ["nodes"] verbs: ["get"] -{{- end }} {{- end -}} diff --git a/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml b/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml index aa8ddd4fd..497d5a9b1 100644 --- a/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml +++ b/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml @@ -11,11 +11,9 @@ metadata: heritage: {{ .Release.Service }} {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }} rules: -{{- if .Values.topology.enabled }} - apiGroups: [""] resources: ["nodes"] verbs: ["get"] -{{- end }} # allow to read Vault Token and connection options from the Tenants namespace - apiGroups: [""] resources: ["secrets"]