From e2a95ac51effbc3767ff2bc1c15c10473c3cd28b Mon Sep 17 00:00:00 2001 From: Humble Chirammal Date: Thu, 7 Apr 2022 10:43:22 +0530 Subject: [PATCH] csi: remove node object update rbac for csi deamonset pods The CSI driver pods dont need to update the node objects for its operations. This commit remove the unwanted access to node object update in the RBAC of CSI pods. Signed-off-by: Humble Chirammal --- deploy/charts/rook-ceph/templates/clusterrole.yaml | 4 ++-- deploy/examples/common.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/deploy/charts/rook-ceph/templates/clusterrole.yaml b/deploy/charts/rook-ceph/templates/clusterrole.yaml index 44187988f..6a4e621d0 100644 --- a/deploy/charts/rook-ceph/templates/clusterrole.yaml +++ b/deploy/charts/rook-ceph/templates/clusterrole.yaml @@ -380,7 +380,7 @@ metadata: rules: - apiGroups: [""] resources: ["nodes"] - verbs: ["get", "list", "update"] + verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["namespaces"] verbs: ["get", "list"] @@ -456,7 +456,7 @@ rules: verbs: ["get", "list"] - apiGroups: [""] resources: ["nodes"] - verbs: ["get", "list", "update"] + verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["namespaces"] verbs: ["get", "list"] diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml index 26f3b8318..c426d0c51 100644 --- a/deploy/examples/common.yaml +++ b/deploy/examples/common.yaml @@ -18,7 +18,7 @@ metadata: rules: - apiGroups: [""] resources: ["nodes"] - verbs: ["get", "list", "update"] + verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["namespaces"] verbs: ["get", "list"] @@ -112,7 +112,7 @@ rules: verbs: ["get", "list"] - apiGroups: [""] resources: ["nodes"] - verbs: ["get", "list", "update"] + verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["namespaces"] verbs: ["get", "list"]