From e64a4bc6313a8e81e11e3724ac6191b34d6d8bff Mon Sep 17 00:00:00 2001
From: David Zhu <dyzz@google.com>
Date: Wed, 13 Nov 2019 15:22:58 -0800
Subject: [PATCH] Update attachdetach-controller role to include permissions to
 get, list, and watch csinodes for CSIMigration

---
 .../rbac/bootstrappolicy/testdata/controller-roles.yaml   | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml b/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml
index b47b6c69d22..c1bfa8d991f 100644
--- a/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml
+++ b/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml
@@ -67,6 +67,14 @@ items:
     - get
     - list
     - watch
+  - apiGroups:
+    - storage.k8s.io
+    resources:
+    - csinodes
+    verbs:
+    - get
+    - list
+    - watch
 - apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRole
   metadata: