From bdeddd4995e537538e5b7b613e04e4a30bac4d0d Mon Sep 17 00:00:00 2001 From: travisn Date: Fri, 2 Aug 2019 13:54:56 -0600 Subject: [PATCH] add CephCluster RBAC to the osd service account In order for the osd service account to reference the cephcluster CR in the owner references, OpenShift requires access to the CephCluster CRD. This adds the minimal changes needed to appease OpenShift. Signed-off-by: travisn --- cluster/examples/kubernetes/ceph/common.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/cluster/examples/kubernetes/ceph/common.yaml b/cluster/examples/kubernetes/ceph/common.yaml index d18f40090..56c0b9b69 100644 --- a/cluster/examples/kubernetes/ceph/common.yaml +++ b/cluster/examples/kubernetes/ceph/common.yaml @@ -513,6 +513,9 @@ rules: - apiGroups: [""] resources: ["configmaps"] verbs: [ "get", "list", "watch", "create", "update", "delete" ] +- apiGroups: ["ceph.rook.io"] + resources: ["cephclusters", "cephclusters/finalizers"] + verbs: ["*"] --- # Aspects of ceph-mgr that require access to the system namespace kind: ClusterRole