Allow snapshot controller to delete VolumeSnapshots

This patch allows the snapshot-controller-runner ClusterRole, bound to
the snapshot-controller Service Account, to delete VolumeSnapshot
objects. This is needed during the VolumeGroupSnapshot deletion.

Signed-off-by: Leonardo Cecchi <leonardo.cecchi@enterprisedb.com>
This commit is contained in:
Leonardo Cecchi
2023-11-14 15:29:21 +01:00
parent 36c3f6d7d7
commit 17f739c7ac

View File

@@ -38,7 +38,7 @@ rules:
verbs: ["patch"]
- apiGroups: ["snapshot.storage.k8s.io"]
resources: ["volumesnapshots"]
verbs: ["get", "list", "watch", "update", "patch"]
verbs: ["get", "list", "watch", "update", "patch", "delete"]
- apiGroups: ["snapshot.storage.k8s.io"]
resources: ["volumesnapshots/status"]
verbs: ["update", "patch"]