Skip to content

Commit e5c46a2

Browse files
committed
Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy
The operator needs permissions to publish and monitor NPs in the custom namespace `openshift-manila-csi-driver`. See openshift/csi-operator#424 for details.
1 parent cfcc1f7 commit e5c46a2

File tree

3 files changed

+36
-0
lines changed

3 files changed

+36
-0
lines changed

assets/csidriveroperators/openstack-manila/base/05_clusterrole.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -327,3 +327,15 @@ rules:
327327
- update
328328
- patch
329329
- delete
330+
- apiGroups:
331+
- networking.k8s.io
332+
resources:
333+
- networkpolicies
334+
verbs:
335+
- watch
336+
- list
337+
- get
338+
- create
339+
- delete
340+
- patch
341+
- update

assets/csidriveroperators/openstack-manila/hypershift/guest/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -317,3 +317,15 @@ rules:
317317
- update
318318
- patch
319319
- delete
320+
- apiGroups:
321+
- networking.k8s.io
322+
resources:
323+
- networkpolicies
324+
verbs:
325+
- watch
326+
- list
327+
- get
328+
- create
329+
- delete
330+
- patch
331+
- update

assets/csidriveroperators/openstack-manila/standalone/generated/rbac.authorization.k8s.io_v1_clusterrole_manila-csi-driver-operator-clusterrole.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -317,3 +317,15 @@ rules:
317317
- update
318318
- patch
319319
- delete
320+
- apiGroups:
321+
- networking.k8s.io
322+
resources:
323+
- networkpolicies
324+
verbs:
325+
- watch
326+
- list
327+
- get
328+
- create
329+
- delete
330+
- patch
331+
- update

0 commit comments

Comments
 (0)