Skip to content

Commit cd1f5aa

Browse files
committed
DRA: update kubelet plugin daemonset permissions
This mirrors the test/e2e/dra/test-driver/deploy/example/plugin-rbac-cluster-role.yaml file in kubernetes/kubernetes#125163. Actual developer documentation should probably reference that file.
1 parent d427551 commit cd1f5aa

File tree

1 file changed

+3
-2
lines changed
  • keps/sig-node/4381-dra-structured-parameters

1 file changed

+3
-2
lines changed

keps/sig-node/4381-dra-structured-parameters/README.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2096,8 +2096,9 @@ desired.
20962096

20972097
The daemonset of a DRA driver must be configured to have a service account
20982098
which grants the following permissions:
2099-
- read/write/patch ResourceSlice
2100-
- read ResourceClaim
2099+
- get/list/watch/create/update/oatch/delete ResourceSlice
2100+
- get ResourceClaim
2101+
- get Node
21012102

21022103
Ideally, write access to ResourceSlice should be limited to objects belonging
21032104
to the node. This is possible with a [validating admission

0 commit comments

Comments
 (0)