Skip to content

Commit 74dcbdc

Browse files
authored
Fix Storage RBAC (#470)
1 parent b16029b commit 74dcbdc

File tree

3 files changed

+6
-6
lines changed

3 files changed

+6
-6
lines changed

chart/kube-arangodb/templates/storage-operator/cluster-role.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,9 @@ metadata:
1313
app.kubernetes.io/instance: {{ .Release.Name }}
1414
release: {{ .Release.Name }}
1515
rules:
16+
- apiGroups: [""]
17+
resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
18+
verbs: ["*"]
1619
- apiGroups: ["apiextensions.k8s.io"]
1720
resources: ["customresourcedefinitions"]
1821
verbs: ["get"]

chart/kube-arangodb/templates/storage-operator/role.yaml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,9 +13,6 @@ metadata:
1313
app.kubernetes.io/instance: {{ .Release.Name }}
1414
release: {{ .Release.Name }}
1515
rules:
16-
- apiGroups: [""]
17-
resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
18-
verbs: ["*"]
1916
- apiGroups: [""]
2017
resources: ["pods"]
2118
verbs: ["get", "update"]

manifests/arango-storage.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,9 @@ metadata:
4848
app.kubernetes.io/instance: storage
4949
release: storage
5050
rules:
51+
- apiGroups: [""]
52+
resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
53+
verbs: ["*"]
5154
- apiGroups: ["apiextensions.k8s.io"]
5255
resources: ["customresourcedefinitions"]
5356
verbs: ["get"]
@@ -95,9 +98,6 @@ metadata:
9598
app.kubernetes.io/instance: storage
9699
release: storage
97100
rules:
98-
- apiGroups: [""]
99-
resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
100-
verbs: ["*"]
101101
- apiGroups: [""]
102102
resources: ["pods"]
103103
verbs: ["get", "update"]

0 commit comments

Comments
 (0)