From 60ea2b29c3d7567268528f92a3b6939f5ece311e Mon Sep 17 00:00:00 2001 From: mickymiek Date: Tue, 8 Jan 2019 18:07:47 +0100 Subject: [PATCH] fix rbac rules for configmaps --- deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml | 3 +++ deploy/rbd/kubernetes/csi-nodeplugin-rbac.yaml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml b/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml index 9ad985b39..29be8e737 100644 --- a/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml +++ b/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml @@ -21,6 +21,9 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["volumeattachments"] verbs: ["get", "list", "watch", "update"] + - apiGroups: [""] + resources: ["configmaps"] + verbs: ["get", "list", "create", "delete"] --- kind: ClusterRoleBinding diff --git a/deploy/rbd/kubernetes/csi-nodeplugin-rbac.yaml b/deploy/rbd/kubernetes/csi-nodeplugin-rbac.yaml index 9ad985b39..29be8e737 100644 --- a/deploy/rbd/kubernetes/csi-nodeplugin-rbac.yaml +++ b/deploy/rbd/kubernetes/csi-nodeplugin-rbac.yaml @@ -21,6 +21,9 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["volumeattachments"] verbs: ["get", "list", "watch", "update"] + - apiGroups: [""] + resources: ["configmaps"] + verbs: ["get", "list", "create", "delete"] --- kind: ClusterRoleBinding