⚡ Give the permission of listing or watching the persistentvolumeclaims to the ClusterRole

2025-05-01 13:26:42 +00:00 · 2023-04-20 03:01:25 +03:00 · 2023-04-20 03:01:25 +03:00 · df7d1ac10c
commit df7d1ac10c
parent c342885cae
3 changed files with 18 additions and 3 deletions
--- a/helm-chart/templates/02-cluster-role.yaml
+++ b/helm-chart/templates/02-cluster-role.yaml
@ -19,6 +19,7 @@ rules:
      - pods
      - services
      - endpoints
+      - persistentvolumeclaims
    verbs:
      - list
      - get
--- a/kubernetes/provider.go
+++ b/kubernetes/provider.go
@ -575,9 +575,22 @@ func (provider *Provider) BuildClusterRole() *rbac.ClusterRole {
 		},
 		Rules: []rbac.PolicyRule{
 			{
-				APIGroups: []string{"", "extensions", "apps"},
-				Resources: []string{"pods", "services", "endpoints"},
-				Verbs:     []string{"list", "get", "watch"},
+				APIGroups: []string{
+					"",
+					"extensions",
+					"apps",
+				},
+				Resources: []string{
+					"pods",
+					"services",
+					"endpoints",
+					"persistentvolumeclaims",
+				},
+				Verbs: []string{
+					"list",
+					"get",
+					"watch",
+				},
 			},
 		},
 	}
--- a/manifests/02-cluster-role.yaml
+++ b/manifests/02-cluster-role.yaml
@ -19,6 +19,7 @@ rules:
      - pods
      - services
      - endpoints
+      - persistentvolumeclaims
    verbs:
      - list
      - get