VolumeSnapshot (#787)

Tasks: - [x] Create VolumeSnapshot - [x] Restore VolumeSnapshot
stashed · May 23, 2019 · cb2289d · cb2289d
1 parent bde38a8
commit cb2289d
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 1 deletion.
diff --git a/chart/stash/templates/cluster-role.yaml b/chart/stash/templates/cluster-role.yaml
@@ -113,3 +113,10 @@ rules:
   {{- range $x := .Values.additionalPodSecurityPolicies }}
   - {{ $x }}
   {{- end }}
+- apiGroups:
+    - snapshot.storage.k8s.io
+  resources:
+    - volumesnapshots
+    - volumesnapshotcontents
+    - volumesnapshotclasses
+  verbs: ["create", "get", "list", "watch", "patch"]
diff --git a/deploy/rbac-list.yaml b/deploy/rbac-list.yaml
@@ -60,7 +60,7 @@ rules:
   - ""
   resources:
   - persistentvolumeclaims
-  verbs: ["get","list","watch"]
+  verbs: ["get","list","watch", "create", "patch"]
 - apiGroups:
   - ""
   resources:
@@ -94,6 +94,7 @@ rules:
   - clusterroles
   - roles
   - rolebindings
+  - clusterrolebindings
   verbs: ["get", "create", "delete", "patch"]
 - apiGroups:
   - apps.openshift.io
@@ -110,6 +111,18 @@ rules:
   - stash-backupsession-cron
   - stash-backup-job
   - stash-restore-job
+- apiGroups:
+    - snapshot.storage.k8s.io
+  resources:
+    - volumesnapshots
+    - volumesnapshotcontents
+    - volumesnapshotclasses
+  verbs: ["create", "get", "list", "watch", "patch"]
+- apiGroups:
+    - storage.k8s.io
+  resources:
+    - storageclasses
+  verbs: ["get"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding