@@ -21,12 +21,14 @@ apiVersion: rbac.authorization.k8s.io/v1
21
21
metadata :
22
22
name : external-provisioner-runner
23
23
rules :
24
- - apiGroups : [""]
25
- resources : ["secrets"]
26
- verbs : ["get", "list"]
24
+ # The following rule should be uncommented for plugins that require secrets
25
+ # for provisioning.
26
+ # - apiGroups: [""]
27
+ # resources: ["secrets"]
28
+ # verbs: ["get", "list"]
27
29
- apiGroups : [""]
28
30
resources : ["persistentvolumes"]
29
- verbs : ["get", "list", "watch", "create", "delete"]
31
+ verbs : ["get", "list", "watch", "update", " create", "delete"]
30
32
- apiGroups : [""]
31
33
resources : ["persistentvolumeclaims"]
32
34
verbs : ["get", "list", "watch", "update"]
@@ -74,9 +76,14 @@ metadata:
74
76
namespace : default
75
77
name : external-provisioner-cfg
76
78
rules :
79
+ # Only one of the following rules for endpoints or leases is required based on
80
+ # what is set for `--leader-election-type`. Endpoints are deprecated in favor of Leases.
77
81
- apiGroups : [""]
78
82
resources : ["endpoints"]
79
83
verbs : ["get", "watch", "list", "delete", "update", "create"]
84
+ - apiGroups : ["coordination.k8s.io"]
85
+ resources : ["leases"]
86
+ verbs : ["get", "watch", "list", "delete", "update", "create"]
80
87
81
88
---
82
89
kind : RoleBinding
0 commit comments