Skip to content

Commit 66dadc5

Browse files
Add list and watch RBACs for secrets to nodeplugin clusterroles
This patch adds watch and list RBACs to clusterroles for CephFS and RBD nodeplugin. This is to comply with the enhancement at: ceph/ceph-csi#5497 Signed-off-by: Niraj Yadav <niryadav@redhat.com>
1 parent 9931c6b commit 66dadc5

File tree

8 files changed

+14
-2
lines changed

8 files changed

+14
-2
lines changed

config/csi-rbac/cephfs_nodeplugin_cluster_role.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ metadata:
66
rules:
77
- apiGroups: [""]
88
resources: ["nodes"]
9-
verbs: ["get"]
9+
verbs: ["get", "list", "watch"]
1010
- apiGroups: [""]
1111
resources: ["secrets"]
1212
verbs: ["get"]

config/csi-rbac/rbd_nodeplugin_cluster_role.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
rules:
66
- apiGroups: [""]
77
resources: ["secrets"]
8-
verbs: ["get", "list"]
8+
verbs: ["get", "list", "watch"]
99
- apiGroups: [""]
1010
resources: ["persistentvolumes"]
1111
verbs: ["get", "list"]

deploy/all-in-one/install.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29725,6 +29725,8 @@ rules:
2972529725
- nodes
2972629726
verbs:
2972729727
- get
29728+
- list
29729+
- watch
2972829730
- apiGroups:
2972929731
- ""
2973029732
resources:
@@ -30486,6 +30488,7 @@ rules:
3048630488
verbs:
3048730489
- get
3048830490
- list
30491+
- watch
3048930492
- apiGroups:
3049030493
- ""
3049130494
resources:

deploy/charts/ceph-csi-drivers/templates/cephfs-nodeplugin-cr-rbac.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,8 @@ rules:
1919
- secrets
2020
verbs:
2121
- get
22+
- list
23+
- watch
2224
- apiGroups:
2325
- ""
2426
resources:

deploy/charts/ceph-csi-drivers/templates/rbd-nodeplugin-cr-rbac.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ rules:
1414
verbs:
1515
- get
1616
- list
17+
- watch
1718
- apiGroups:
1819
- ""
1920
resources:

deploy/charts/ceph-csi-operator/templates/cephfs-nodeplugin-cr-rbac.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,8 @@ rules:
1111
- nodes
1212
verbs:
1313
- get
14+
- list
15+
- watch
1416
- apiGroups:
1517
- ""
1618
resources:

deploy/charts/ceph-csi-operator/templates/rbd-nodeplugin-cr-rbac.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ rules:
1212
verbs:
1313
- get
1414
- list
15+
- watch
1516
- apiGroups:
1617
- ""
1718
resources:

deploy/multifile/csi-rbac.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -412,6 +412,8 @@ rules:
412412
- nodes
413413
verbs:
414414
- get
415+
- list
416+
- watch
415417
- apiGroups:
416418
- ""
417419
resources:
@@ -837,6 +839,7 @@ rules:
837839
verbs:
838840
- get
839841
- list
842+
- watch
840843
- apiGroups:
841844
- ""
842845
resources:

0 commit comments

Comments
 (0)