From 4e02fae9212fa70d782ff8c6420a0c56be5c3487 Mon Sep 17 00:00:00 2001 From: Praveen M Date: Wed, 8 Jan 2025 13:54:52 +0530 Subject: [PATCH] helm: add RBACS for replication.storage.openshift.io VolumeGroupReplicationContent controller needs `get`, `list` and `watch` access control for resource `VolumeGroupReplicationContents`. And `get` access control for resource `VolumeGroupReplicationClasses`. Signed-off-by: Praveen M --- charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml b/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml index b2c01ae6250..2bcc7550e0f 100644 --- a/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml +++ b/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml @@ -29,6 +29,12 @@ rules: - apiGroups: [""] resources: ["endpoints"] verbs: ["get", "create", "update"] + - apiGroups: ["replication.storage.openshift.io"] + resources: ["volumegroupreplicationcontents"] + verbs: ["get", "list", "watch"] + - apiGroups: ["replication.storage.openshift.io"] + resources: ["volumegroupreplicationclasses"] + verbs: ["get"] {{- if .Values.provisioner.attacher.enabled }} - apiGroups: ["storage.k8s.io"] resources: ["volumeattachments"]