review feedback: tune cephfs provisioner and driver rbac, de-escalate privilage

Signed-off-by: Huamin Chen <hchen@redhat.com>
2025-06-14 18:53:35 +00:00 · 2019-01-23 09:14:11 -05:00
parent c6c496ff59
commit 7caf03b556
3 changed files with 48 additions and 2 deletions
--- a/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml
+++ b/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml
@ -23,7 +23,7 @@ rules:
    verbs: ["get", "list", "watch", "update"]
  - apiGroups: [""]
    resources: ["configmaps"]
-    verbs: ["get", "list", "create", "delete"]
+    verbs: ["get", "list"]

 ---
 kind: ClusterRoleBinding