Merge pull request #959 from leonardoce/dev/rbac-group-snapshot

Allow csi-snapshotter to create and manage VolumeSnapshots
2023-11-16 18:01:41 +01:00
parent 36c3f6d7d7 6ac1229ab8
commit 74b56006de
1 changed files with 3 additions and 0 deletions
--- a/deploy/kubernetes/csi-snapshotter/rbac-csi-snapshotter.yaml
+++ b/deploy/kubernetes/csi-snapshotter/rbac-csi-snapshotter.yaml
@@ -34,6 +34,9 @@ rules:
  - apiGroups: ["snapshot.storage.k8s.io"]
    resources: ["volumesnapshotclasses"]
    verbs: ["get", "list", "watch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshots"]
+    verbs: ["get", "list", "watch", "update", "patch", "create"]
  - apiGroups: ["snapshot.storage.k8s.io"]
    resources: ["volumesnapshotcontents"]
    verbs: ["get", "list", "watch", "update", "patch", "create"]