Skip to content
Snippets Groups Projects
Unverified Commit deca5ec9 authored by Steven Reitsma's avatar Steven Reitsma Committed by GitHub
Browse files

Remove old csi-attacher flag and fix RBAC for Cinder CSI (#6358)

Add proper RBAC for new csi-attacher version
parent 05b9f14b
No related branches found
No related tags found
No related merge requests found
...@@ -16,16 +16,19 @@ metadata: ...@@ -16,16 +16,19 @@ metadata:
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumes"] resources: ["persistentvolumes"]
verbs: ["get", "list", "watch", "update"] verbs: ["get", "list", "watch", "patch"]
- apiGroups: [""] - apiGroups: [""]
resources: ["nodes"] resources: ["nodes"]
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: ["storage.k8s.io"] - apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments"] resources: ["volumeattachments"]
verbs: ["get", "list", "watch", "update"] verbs: ["get", "list", "watch", "patch"]
- apiGroups: ["storage.k8s.io"] - apiGroups: ["storage.k8s.io"]
resources: ["csinodes"] resources: ["csinodes"]
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments/status"]
verbs: ["patch"]
--- ---
......
...@@ -27,7 +27,6 @@ spec: ...@@ -27,7 +27,6 @@ spec:
- "--csi-address=$(ADDRESS)" - "--csi-address=$(ADDRESS)"
{% if cinder_csi_controller_replicas is defined and cinder_csi_controller_replicas > 1 %} {% if cinder_csi_controller_replicas is defined and cinder_csi_controller_replicas > 1 %}
- --leader-election - --leader-election
- --leader-election-type=leases
- --leader-election-namespace=kube-system - --leader-election-namespace=kube-system
{% endif %} {% endif %}
env: env:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment