Merge pull request #82 from Madhu-1/fix-csiaddons-rbac

DFBUGS-848: [release-4.18] csi: update RBACs for CSIAddonsNode
red-hat-storage · Feb 18, 2025 · 803c9f1 · 803c9f1
2 parents 7fe4e5f + 449930e
commit 803c9f1
Show file tree

Hide file tree

Showing 6 changed files with 22 additions and 4 deletions.
diff --git a/bundle/manifests/cephcsi-operator.clusterserviceversion.yaml b/bundle/manifests/cephcsi-operator.clusterserviceversion.yaml
@@ -4,7 +4,7 @@ metadata:
   annotations:
     alm-examples: '[]'
     capabilities: Basic Install
-    createdAt: "2025-01-07T09:56:41Z"
+    createdAt: "2025-02-18T09:22:36Z"
     olm.skipRange: ""
     operators.operatorframework.io/builder: operator-sdk-v1.34.1
     operators.operatorframework.io/operator-type: non-standalone
@@ -862,6 +862,8 @@ spec:
           - csiaddonsnodes
           verbs:
           - get
+          - watch
+          - list
           - create
           - update
           - delete
@@ -936,6 +938,8 @@ spec:
           - csiaddonsnodes
           verbs:
           - get
+          - watch
+          - list
           - create
           - update
           - delete
@@ -966,6 +970,8 @@ spec:
           - csiaddonsnodes
           verbs:
           - get
+          - watch
+          - list
           - create
           - update
           - delete

diff --git a/config/csi-rbac/cephfs_ctrlplugin_role.yaml b/config/csi-rbac/cephfs_ctrlplugin_role.yaml
@@ -8,7 +8,7 @@ rules:
     verbs: ["get", "watch", "list", "delete", "update", "create"]
   - apiGroups: ["csiaddons.openshift.io"]
     resources: ["csiaddonsnodes"]
-    verbs: ["get", "create", "update", "delete"]
+    verbs: ["get", "watch", "list", "create", "update", "delete"]
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get"]

diff --git a/config/csi-rbac/rbd_ctrlplugin_role.yaml b/config/csi-rbac/rbd_ctrlplugin_role.yaml
@@ -8,7 +8,7 @@ rules:
     verbs: ["get", "watch", "list", "delete", "update", "create"]
   - apiGroups: ["csiaddons.openshift.io"]
     resources: ["csiaddonsnodes"]
-    verbs: ["get", "create", "update", "delete"]
+    verbs: ["get", "watch", "list", "create", "update", "delete"]
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get"]

diff --git a/config/csi-rbac/rbd_nodeplugin_role.yaml b/config/csi-rbac/rbd_nodeplugin_role.yaml
@@ -5,7 +5,7 @@ metadata:
 rules:
   - apiGroups: ["csiaddons.openshift.io"]
     resources: ["csiaddonsnodes"]
-    verbs: ["get", "create", "update", "delete"]
+    verbs: ["get", "watch", "list", "create", "update", "delete"]
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get"]

diff --git a/deploy/all-in-one/install.yaml b/deploy/all-in-one/install.yaml
@@ -14098,6 +14098,8 @@ rules:
   - csiaddonsnodes
   verbs:
   - get
+  - watch
+  - list
   - create
   - update
   - delete
@@ -14185,6 +14187,8 @@ rules:
   - csiaddonsnodes
   verbs:
   - get
+  - watch
+  - list
   - create
   - update
   - delete
@@ -14220,6 +14224,8 @@ rules:
   - csiaddonsnodes
   verbs:
   - get
+  - watch
+  - list
   - create
   - update
   - delete

diff --git a/deploy/multifile/csi-rbac.yaml b/deploy/multifile/csi-rbac.yaml
@@ -57,6 +57,8 @@ rules:
   - csiaddonsnodes
   verbs:
   - get
+  - watch
+  - list
   - create
   - update
   - delete
@@ -103,6 +105,8 @@ rules:
   - csiaddonsnodes
   verbs:
   - get
+  - watch
+  - list
   - create
   - update
   - delete
@@ -138,6 +142,8 @@ rules:
   - csiaddonsnodes
   verbs:
   - get
+  - watch
+  - list
   - create
   - update
   - delete
-Original file line number
+Diff line change
@@ Expand Up / @@ -14098,6 +14098,8 @@ rules: @@
       - csiaddonsnodes
       verbs:
       - get
+      - watch
+      - list
       - create
       - update
       - delete
@@ Expand Down Expand Up / @@ -14185,6 +14187,8 @@ rules: @@
       - csiaddonsnodes
       verbs:
       - get
+      - watch
+      - list
       - create
       - update
       - delete
@@ Expand Down Expand Up / @@ -14220,6 +14224,8 @@ rules: @@
       - csiaddonsnodes
       verbs:
       - get
+      - watch
+      - list
       - create
       - update
       - delete
@@ Expand Down @@