diff --git a/deploy/charts/library/templates/_cluster-role.tpl b/deploy/charts/library/templates/_cluster-role.tpl index 1f23d09ce..d3fa2b049 100644 --- a/deploy/charts/library/templates/_cluster-role.tpl +++ b/deploy/charts/library/templates/_cluster-role.tpl @@ -27,7 +27,14 @@ metadata: namespace: {{ .Release.Namespace }} # namespace:cluster rules: # Placeholder role so the rgw service account will - # be generated in the csv + # be generated in the csv. Remove this role and role binding + # when fixing https://github.com/rook/rook/issues/10141. + - apiGroups: + - "" + resources: + - configmaps + verbs: + - get --- # Aspects of ceph-mgr that operate within the cluster's namespace kind: Role diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml index 25c0ccb97..a4615aca1 100644 --- a/deploy/examples/common.yaml +++ b/deploy/examples/common.yaml @@ -1011,8 +1011,15 @@ metadata: name: rook-ceph-rgw namespace: rook-ceph # namespace:cluster rules: -# Placeholder role so the rgw service account will -# be generated in the csv + # Placeholder role so the rgw service account will + # be generated in the csv. Remove this role and role binding + # when fixing https://github.com/rook/rook/issues/10141. + - apiGroups: + - "" + resources: + - configmaps + verbs: + - get --- # Allow the operator to manage resources in its own namespace apiVersion: rbac.authorization.k8s.io/v1