From b50c141a73087adddb4715da27fc1bf356012591 Mon Sep 17 00:00:00 2001 From: Mateusz Gozdek Date: Mon, 13 May 2019 01:00:23 +0200 Subject: [PATCH] helm: fix PSP use cluster role 1b21e42a90c3a452b6ac736122ce0c60ca64fa89 introduced a regression, where podsecuritypolicy resource has been changed from 'extensions' group to 'apps', when it should be changed to 'policy'. This prevents rook operator from spawning on a cluster with PSP enabled. Signed-off-by: Mateusz Gozdek --- cluster/charts/rook-ceph/templates/clusterrole.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/charts/rook-ceph/templates/clusterrole.yaml b/cluster/charts/rook-ceph/templates/clusterrole.yaml index 83dd9606a..441bee5d1 100644 --- a/cluster/charts/rook-ceph/templates/clusterrole.yaml +++ b/cluster/charts/rook-ceph/templates/clusterrole.yaml @@ -252,7 +252,7 @@ metadata: rbac.ceph.rook.io/aggregate-to-rook-ceph-system-psp-user: "true" rules: - apiGroups: - - apps + - policy resources: - podsecuritypolicies resourceNames: