From 48e9a39842026b1f8678f15c36b7d29ce116aa04 Mon Sep 17 00:00:00 2001 From: Patrick Ohly Date: Thu, 2 Dec 2021 15:06:14 +0100 Subject: [PATCH] storage e2e: update snapshotter sidecard RBAC The same change was already done for csi-driver-host-path master, but not released yet because csi-snapshotter v5.0.0 itself was not ready yet. We need this update in k/k because some canary jobs already use the new snapshotter sidecar which causes permission issues. --- .../csi-snapshotter/rbac-csi-snapshotter.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/test/e2e/testing-manifests/storage-csi/external-snapshotter/csi-snapshotter/rbac-csi-snapshotter.yaml b/test/e2e/testing-manifests/storage-csi/external-snapshotter/csi-snapshotter/rbac-csi-snapshotter.yaml index 6c63f100cd9..7843e80b098 100644 --- a/test/e2e/testing-manifests/storage-csi/external-snapshotter/csi-snapshotter/rbac-csi-snapshotter.yaml +++ b/test/e2e/testing-manifests/storage-csi/external-snapshotter/csi-snapshotter/rbac-csi-snapshotter.yaml @@ -1,5 +1,5 @@ -# Do not edit, downloaded from https://github.com/kubernetes-csi/external-snapshotter/raw/v4.2.1/deploy/kubernetes/csi-snapshotter/rbac-csi-snapshotter.yaml -# for csi-driver-host-path v1.7.3 +# Do not edit, downloaded from https://github.com/kubernetes-csi/external-snapshotter/raw/v5.0.0-rc1/deploy/kubernetes/csi-snapshotter/rbac-csi-snapshotter.yaml +# for csi-driver-host-path master # by ./update-hostpath.sh # # Together with the RBAC file for external-provisioner, this YAML file @@ -39,10 +39,10 @@ rules: verbs: ["get", "list", "watch"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshotcontents"] - verbs: ["create", "get", "list", "watch", "update", "delete"] + verbs: ["create", "get", "list", "watch", "update", "delete", "patch"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshotcontents/status"] - verbs: ["update"] + verbs: ["update", "patch"] --- kind: ClusterRoleBinding