feedc0de/my-rook-config
1
0
Fork 0
forked from rook/rook
Code Pull Requests Activity

csi: remove watch verb from csi-snapshottter sidecar RBAC

Browse Source 
The `watch` verb is not required for the csi-snapshotter sidecar
to function, removing it from the deployment

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
This commit is contained in:
Humble Chirammal
2022-05-16 13:21:42 +05:30
parent 9b6143baa7
commit 0812d08a75
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/charts/rook-ceph/templates/clusterrole.yaml
+1 -1
View File
@@ -472,7 +472,7 @@ rules:
verbs: ["patch"]
- apiGroups: ["snapshot.storage.k8s.io"]
resources: ["volumesnapshots"]
verbs: ["get", "list", "watch"]
verbs: ["get", "list"]
- apiGroups: ["snapshot.storage.k8s.io"]
resources: ["volumesnapshotclasses"]
verbs: ["get", "list", "watch"]
deploy/examples/common.yaml
+1 -1
View File
@@ -60,7 +60,7 @@ rules:
verbs: ["patch"]
- apiGroups: ["snapshot.storage.k8s.io"]
resources: ["volumesnapshots"]
verbs: ["get", "list", "watch"]
verbs: ["get", "list"]
- apiGroups: ["snapshot.storage.k8s.io"]
resources: ["volumesnapshotclasses"]
verbs: ["get", "list", "watch"]