From 231317c5f17889c255573f7f7643bec802430203 Mon Sep 17 00:00:00 2001 From: Daniel Chaplin Date: Thu, 1 Oct 2020 12:11:57 +0300 Subject: [PATCH] core: rbac: allow manipulations on monitoring.coreos.com resources Before it wasn't allowed but required to successfully deploy Ceph cluster with monitoring enabled. Fixed by adding more rules to rook-ceph-system rbac role Closes: https://github.com/rook/rook/issues/6255 Signed-off-by: Daniel Chaplin --- cluster/charts/rook-ceph/templates/role.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/cluster/charts/rook-ceph/templates/role.yaml b/cluster/charts/rook-ceph/templates/role.yaml index ab0059f6e..09de4cb91 100644 --- a/cluster/charts/rook-ceph/templates/role.yaml +++ b/cluster/charts/rook-ceph/templates/role.yaml @@ -43,6 +43,18 @@ rules: - network-attachment-definitions verbs: - get +- apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + - prometheusrules + verbs: + - get + - list + - watch + - create + - update + - delete --- kind: Role apiVersion: rbac.authorization.k8s.io/v1