From 3f065918d9825a6ad50579f1e7e896f3a20bcd2c Mon Sep 17 00:00:00 2001 From: Mulugeta Ayalew Tamiru Date: Fri, 22 Apr 2022 09:04:13 +0200 Subject: [PATCH] Update verbs for volumeattachments resource (#8731) * Update verbs for volumeattachments resource Update verbs for volumeattachments resource so that the kubelet can create volumeattachments and mount volumes when deploying Kubernetes on VMware vSphere. * Update verbs for volumeattachments resource Update verbs for volumeattachments resource to match upstream * Update vsphere-csi-controller-rbac.yml.j2 --- .../vsphere/templates/vsphere-csi-controller-rbac.yml.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/kubernetes-apps/csi_driver/vsphere/templates/vsphere-csi-controller-rbac.yml.j2 b/roles/kubernetes-apps/csi_driver/vsphere/templates/vsphere-csi-controller-rbac.yml.j2 index b7c331698..d2f0758ed 100644 --- a/roles/kubernetes-apps/csi_driver/vsphere/templates/vsphere-csi-controller-rbac.yml.j2 +++ b/roles/kubernetes-apps/csi_driver/vsphere/templates/vsphere-csi-controller-rbac.yml.j2 @@ -40,7 +40,7 @@ rules: verbs: ["get", "list", "watch"] - apiGroups: ["storage.k8s.io"] resources: ["volumeattachments"] - verbs: ["get", "list", "watch", "patch"] + verbs: ["get", "list", "watch", "patch", "update"] {% if external_vsphere_version >= "7.0u1" %} - apiGroups: ["cns.vmware.com"] resources: ["triggercsifullsyncs"]