Skip to content

Commit 95f9e99

Browse files
helm: add RBACS for replication.storage.openshift.io
VolumeGroupReplicationContent controller needs `get`, `list` and `watch` access control for resource `VolumeGroupReplicationContents`. And `get` access control for resource `VolumeGroupReplicationClasses`. Signed-off-by: Praveen M <[email protected]>
1 parent 75eaf01 commit 95f9e99

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

Diff for: charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,12 @@ rules:
2929
- apiGroups: [""]
3030
resources: ["endpoints"]
3131
verbs: ["get", "create", "update"]
32+
- apiGroups: ["replication.storage.openshift.io"]
33+
resources: ["volumegroupreplicationcontents"]
34+
verbs: ["get", "list", "watch"]
35+
- apiGroups: ["replication.storage.openshift.io"]
36+
resources: ["volumegroupreplicationclasses"]
37+
verbs: ["get"]
3238
{{- if .Values.provisioner.attacher.enabled }}
3339
- apiGroups: ["storage.k8s.io"]
3440
resources: ["volumeattachments"]

0 commit comments

Comments
 (0)