From e122809913e9178fcf0fd6c90ea209d487446c1b Mon Sep 17 00:00:00 2001 From: Meinhard Zhou Date: Fri, 17 Feb 2023 11:05:31 +0800 Subject: [PATCH] fix: add volumeattachments/status to rbac role's rule Signed-off-by: Meinhard Zhou --- deploy/kubernetes/csi-nvmf-rbac.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/deploy/kubernetes/csi-nvmf-rbac.yaml b/deploy/kubernetes/csi-nvmf-rbac.yaml index 4e9a435..6335742 100644 --- a/deploy/kubernetes/csi-nvmf-rbac.yaml +++ b/deploy/kubernetes/csi-nvmf-rbac.yaml @@ -16,7 +16,7 @@ metadata: kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: - name: nvmf-external-provisioner-role + name: nvmf-external-provisioner-binding rules: - apiGroups: [""] resources: ["nodes"] @@ -71,6 +71,10 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["volumeattachments"] verbs: ["get", "list", "watch", "update", "patch"] + - apiGroups: ["storage.k8s.io"] + resources: ["volumeattachments/status"] + verbs: ["patch"] + --- kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1