add volumegroupsnapshotclass read permissions for webhook

openshift · Apr 2, 2024 · 8852528 · 8852528
1 parent 42d42f9
commit 8852528
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/assets/rbac/webhook_clusterrole.yaml b/assets/rbac/webhook_clusterrole.yaml
@@ -6,3 +6,6 @@ rules:
 - apiGroups: ["snapshot.storage.k8s.io"]
   resources: ["volumesnapshotclasses"]
   verbs: ["get", "list", "watch"]
+- apiGroups: ["groupsnapshot.storage.k8s.io"]
+  resources: ["volumegroupsnapshotclasses"]
+  verbs: ["get", "list", "watch"]
diff --git a/manifests/05_operand_rbac.yaml b/manifests/05_operand_rbac.yaml
@@ -35,6 +35,9 @@ rules:
   - apiGroups: ["snapshot.storage.k8s.io"]
     resources: ["volumesnapshotcontents/status"]
     verbs: ["update", "patch"]
+  - apiGroups: ["groupsnapshot.storage.k8s.io"]
+    resources: ["volumegroupsnapshotclasses"]
+    verbs: ["get", "list", "watch"]
 
 ---
 kind: ClusterRoleBinding