Merge pull request #1515 from andyzhangx/add-pv-patch-permission

andyzhangx · web-flow · commit 159e91c1e397 · 2024-07-30T11:00:03.000+08:00
fix: add pv patch permission with HonorPVReclaimPolicy enabled
diff --git a/charts/latest/blob-csi-driver-v0.0.0.tgz b/charts/latest/blob-csi-driver-v0.0.0.tgz
diff --git a/charts/latest/blob-csi-driver/templates/rbac-csi-blob-controller.yaml b/charts/latest/blob-csi-driver/templates/rbac-csi-blob-controller.yaml
@@ -8,7 +8,7 @@ metadata:
 rules:
   - apiGroups: [""]
     resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
+    verbs: ["get", "list", "watch", "create", "patch", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
     verbs: ["get", "list", "watch", "update"]
diff --git a/charts/v1.24.2/blob-csi-driver-v1.24.2.tgz b/charts/v1.24.2/blob-csi-driver-v1.24.2.tgz
diff --git a/charts/v1.24.2/blob-csi-driver/templates/rbac-csi-blob-controller.yaml b/charts/v1.24.2/blob-csi-driver/templates/rbac-csi-blob-controller.yaml
@@ -8,7 +8,7 @@ metadata:
 rules:
   - apiGroups: [""]
     resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
+    verbs: ["get", "list", "watch", "create", "patch", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
     verbs: ["get", "list", "watch", "update"]
diff --git a/deploy/rbac-csi-blob-controller.yaml b/deploy/rbac-csi-blob-controller.yaml
@@ -13,7 +13,7 @@ metadata:
 rules:
   - apiGroups: [""]
     resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
+    verbs: ["get", "list", "watch", "create", "patch", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
     verbs: ["get", "list", "watch", "update"]
diff --git a/deploy/v1.24.2/rbac-csi-blob-controller.yaml b/deploy/v1.24.2/rbac-csi-blob-controller.yaml
@@ -13,7 +13,7 @@ metadata:
 rules:
   - apiGroups: [""]
     resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
+    verbs: ["get", "list", "watch", "create", "patch", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
     verbs: ["get", "list", "watch", "update"]
