From 33deac13d2be2b7cced3339f7a7f74ead21f5302 Mon Sep 17 00:00:00 2001 From: Tarun Chinmai Sekar Date: Thu, 23 Feb 2023 16:05:47 -0800 Subject: [PATCH] add volumeattachments/status permission the clusterrole --- deploy/kubernetes/sidecars/external-attacher/rbac.yaml | 2 +- helm-chart/csi-driver/templates/external-attacher-rbac.yaml | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/deploy/kubernetes/sidecars/external-attacher/rbac.yaml b/deploy/kubernetes/sidecars/external-attacher/rbac.yaml index 3bbea415..d0ce952a 100644 --- a/deploy/kubernetes/sidecars/external-attacher/rbac.yaml +++ b/deploy/kubernetes/sidecars/external-attacher/rbac.yaml @@ -31,7 +31,7 @@ rules: resources: ["csinodes"] verbs: ["get", "list", "watch"] - apiGroups: ["storage.k8s.io"] - resources: ["volumeattachments"] + resources: ["volumeattachments", "volumeattachments/status"] verbs: ["get", "list", "watch", "update", "patch"] #Secret permission is optional. #Enable it if you need value from secret. diff --git a/helm-chart/csi-driver/templates/external-attacher-rbac.yaml b/helm-chart/csi-driver/templates/external-attacher-rbac.yaml index 024ee5a7..452ea603 100644 --- a/helm-chart/csi-driver/templates/external-attacher-rbac.yaml +++ b/helm-chart/csi-driver/templates/external-attacher-rbac.yaml @@ -25,6 +25,7 @@ rules: - storage.k8s.io resources: - volumeattachments + - volumeattachments/status verbs: - get - list