Browse Source
Remove old csi-attacher flag and fix RBAC for Cinder CSI (#6358)
Add proper RBAC for new csi-attacher version
pull/6393/head
Steven Reitsma
4 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with
5 additions and
3 deletions
-
roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-controllerplugin-rbac.yml.j2
-
roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-controllerplugin.yml.j2
|
|
|
@ -16,16 +16,19 @@ metadata: |
|
|
|
rules: |
|
|
|
- apiGroups: [""] |
|
|
|
resources: ["persistentvolumes"] |
|
|
|
verbs: ["get", "list", "watch", "update"] |
|
|
|
verbs: ["get", "list", "watch", "patch"] |
|
|
|
- apiGroups: [""] |
|
|
|
resources: ["nodes"] |
|
|
|
verbs: ["get", "list", "watch"] |
|
|
|
- apiGroups: ["storage.k8s.io"] |
|
|
|
resources: ["volumeattachments"] |
|
|
|
verbs: ["get", "list", "watch", "update"] |
|
|
|
verbs: ["get", "list", "watch", "patch"] |
|
|
|
- apiGroups: ["storage.k8s.io"] |
|
|
|
resources: ["csinodes"] |
|
|
|
verbs: ["get", "list", "watch"] |
|
|
|
- apiGroups: ["storage.k8s.io"] |
|
|
|
resources: ["volumeattachments/status"] |
|
|
|
verbs: ["patch"] |
|
|
|
|
|
|
|
|
|
|
|
--- |
|
|
|
|
|
|
|
@ -27,7 +27,6 @@ spec: |
|
|
|
- "--csi-address=$(ADDRESS)" |
|
|
|
{% if cinder_csi_controller_replicas is defined and cinder_csi_controller_replicas > 1 %} |
|
|
|
- --leader-election |
|
|
|
- --leader-election-type=leases |
|
|
|
- --leader-election-namespace=kube-system |
|
|
|
{% endif %} |
|
|
|
env: |
|
|
|
|
