From d02d6a426991d1aa7580b725881ab4bd5082f8da Mon Sep 17 00:00:00 2001 From: Roman Bednar Date: Wed, 26 Jan 2022 11:53:16 +0100 Subject: [PATCH] Add external-snapshooter permissions to patch snapshots The new external-snapshotter needs permissions to Patch VolumeSnapshots and VolumeSnapshotContents. https://github.com/kubernetes-csi/external-snapshotter/releases/tag/v5.0.1 --- assets/rbac/snapshotter_role.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/assets/rbac/snapshotter_role.yaml b/assets/rbac/snapshotter_role.yaml index a1971768..1d7323ad 100644 --- a/assets/rbac/snapshotter_role.yaml +++ b/assets/rbac/snapshotter_role.yaml @@ -23,10 +23,10 @@ rules: verbs: ["get", "list", "watch"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshotcontents"] - verbs: ["create", "get", "list", "watch", "update", "delete"] + verbs: ["create", "get", "list", "watch", "update", "delete", "patch"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshotcontents/status"] - verbs: ["update"] + verbs: ["update", "patch"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshots"] verbs: ["get", "list", "watch", "update"]