From 0812d08a75fd15146e6da8f4e9bfa5a1fefbafd5 Mon Sep 17 00:00:00 2001 From: Humble Chirammal Date: Mon, 16 May 2022 13:17:34 +0530 Subject: [PATCH] csi: remove `watch` verb from csi-snapshottter sidecar RBAC The `watch` verb is not required for the csi-snapshotter sidecar to function, removing it from the deployment Signed-off-by: Humble Chirammal --- deploy/charts/rook-ceph/templates/clusterrole.yaml | 2 +- deploy/examples/common.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/charts/rook-ceph/templates/clusterrole.yaml b/deploy/charts/rook-ceph/templates/clusterrole.yaml index be3278454..58b680e77 100644 --- a/deploy/charts/rook-ceph/templates/clusterrole.yaml +++ b/deploy/charts/rook-ceph/templates/clusterrole.yaml @@ -472,7 +472,7 @@ rules: verbs: ["patch"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshots"] - verbs: ["get", "list", "watch"] + verbs: ["get", "list"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshotclasses"] verbs: ["get", "list", "watch"] diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml index 24e1a9c6b..38d67e7eb 100644 --- a/deploy/examples/common.yaml +++ b/deploy/examples/common.yaml @@ -60,7 +60,7 @@ rules: verbs: ["patch"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshots"] - verbs: ["get", "list", "watch"] + verbs: ["get", "list"] - apiGroups: ["snapshot.storage.k8s.io"] resources: ["volumesnapshotclasses"] verbs: ["get", "list", "watch"]