Merge pull request #99 from schinmai-akamai/master

add volumeattachments/status permission to the clusterrole
linode · Feb 24, 2023 · ee3c75e · ee3c75e
2 parents 48a1ad7 + 33deac1
commit ee3c75e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/deploy/kubernetes/sidecars/external-attacher/rbac.yaml b/deploy/kubernetes/sidecars/external-attacher/rbac.yaml
@@ -31,7 +31,7 @@ rules:
     resources: ["csinodes"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["storage.k8s.io"]
-    resources: ["volumeattachments"]
+    resources: ["volumeattachments", "volumeattachments/status"]
     verbs: ["get", "list", "watch", "update", "patch"]
 #Secret permission is optional.
 #Enable it if you need value from secret.

diff --git a/helm-chart/csi-driver/templates/external-attacher-rbac.yaml b/helm-chart/csi-driver/templates/external-attacher-rbac.yaml
@@ -25,6 +25,7 @@ rules:
   - storage.k8s.io
   resources:
   - volumeattachments
+  - volumeattachments/status
   verbs:
   - get
   - list