From fcb8646cce4e3f2c0783cab949ae0c4dac949855 Mon Sep 17 00:00:00 2001 From: Rewant Soni Date: Wed, 27 Nov 2024 16:11:19 +0530 Subject: [PATCH] csiaddons: add rbac permission to delete the csiaddons obj csiaddons needs delete permission for setting ownerRef Signed-off-by: Rewant Soni --- config/csi-rbac/cephfs_ctrlplugin_role.yaml | 2 +- config/csi-rbac/rbd_ctrlplugin_role.yaml | 2 +- config/csi-rbac/rbd_nodeplugin_role.yaml | 2 +- deploy/all-in-one/install.yaml | 3 +++ deploy/multifile/csi-rbac.yaml | 3 +++ 5 files changed, 9 insertions(+), 3 deletions(-) diff --git a/config/csi-rbac/cephfs_ctrlplugin_role.yaml b/config/csi-rbac/cephfs_ctrlplugin_role.yaml index cabfb628..123d5d96 100644 --- a/config/csi-rbac/cephfs_ctrlplugin_role.yaml +++ b/config/csi-rbac/cephfs_ctrlplugin_role.yaml @@ -8,7 +8,7 @@ rules: verbs: ["get", "watch", "list", "delete", "update", "create"] - apiGroups: ["csiaddons.openshift.io"] resources: ["csiaddonsnodes"] - verbs: ["get", "create", "update"] + verbs: ["get", "create", "update", "delete"] - apiGroups: [""] resources: ["pods"] verbs: ["get"] diff --git a/config/csi-rbac/rbd_ctrlplugin_role.yaml b/config/csi-rbac/rbd_ctrlplugin_role.yaml index 9be22152..d04f983d 100644 --- a/config/csi-rbac/rbd_ctrlplugin_role.yaml +++ b/config/csi-rbac/rbd_ctrlplugin_role.yaml @@ -8,7 +8,7 @@ rules: verbs: ["get", "watch", "list", "delete", "update", "create"] - apiGroups: ["csiaddons.openshift.io"] resources: ["csiaddonsnodes"] - verbs: ["get", "create", "update"] + verbs: ["get", "create", "update", "delete"] - apiGroups: [""] resources: ["pods"] verbs: ["get"] diff --git a/config/csi-rbac/rbd_nodeplugin_role.yaml b/config/csi-rbac/rbd_nodeplugin_role.yaml index ae895ffc..1e9353a9 100644 --- a/config/csi-rbac/rbd_nodeplugin_role.yaml +++ b/config/csi-rbac/rbd_nodeplugin_role.yaml @@ -5,7 +5,7 @@ metadata: rules: - apiGroups: ["csiaddons.openshift.io"] resources: ["csiaddonsnodes"] - verbs: ["get", "create", "update"] + verbs: ["get", "create", "update", "delete"] - apiGroups: [""] resources: ["pods"] verbs: ["get"] diff --git a/deploy/all-in-one/install.yaml b/deploy/all-in-one/install.yaml index 0a82cfc2..07e8a387 100644 --- a/deploy/all-in-one/install.yaml +++ b/deploy/all-in-one/install.yaml @@ -14100,6 +14100,7 @@ rules: - get - create - update + - delete - apiGroups: - "" resources: @@ -14186,6 +14187,7 @@ rules: - get - create - update + - delete - apiGroups: - "" resources: @@ -14220,6 +14222,7 @@ rules: - get - create - update + - delete - apiGroups: - "" resources: diff --git a/deploy/multifile/csi-rbac.yaml b/deploy/multifile/csi-rbac.yaml index 935328f3..84941e59 100644 --- a/deploy/multifile/csi-rbac.yaml +++ b/deploy/multifile/csi-rbac.yaml @@ -59,6 +59,7 @@ rules: - get - create - update + - delete - apiGroups: - "" resources: @@ -104,6 +105,7 @@ rules: - get - create - update + - delete - apiGroups: - "" resources: @@ -138,6 +140,7 @@ rules: - get - create - update + - delete - apiGroups: - "" resources: