review feedback: tune cephfs provisioner and driver rbac, de-escalate privilage

Signed-off-by: Huamin Chen <hchen@redhat.com>
2025-06-13 18:43:34 +00:00 · 2019-01-23 09:14:11 -05:00
parent c6c496ff59
commit 7caf03b556
3 changed files with 48 additions and 2 deletions
--- a/deploy/cephfs/kubernetes/csi-provisioner-rbac.yaml
+++ b/deploy/cephfs/kubernetes/csi-provisioner-rbac.yaml
@ -24,6 +24,9 @@ rules:
  - apiGroups: [""]
    resources: ["events"]
    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: ["get", "list", "create", "delete"]
    
 ---
 kind: ClusterRoleBinding