Remove create and delete from csi-snapshotter RBAC

Removed Create and Delete verb for volumesnapshotcontents Resource in the external-snapshotter-runner clusterRole.
2022-04-11 20:01:44 +05:30
parent 019a59a10f
commit 7748d5ffb6
1 changed files with 1 additions and 1 deletions
--- a/deploy/kubernetes/csi-snapshotter/rbac-csi-snapshotter.yaml
+++ b/deploy/kubernetes/csi-snapshotter/rbac-csi-snapshotter.yaml
@@ -35,7 +35,7 @@ rules:
    verbs: ["get", "list", "watch"]
  - apiGroups: ["snapshot.storage.k8s.io"]
    resources: ["volumesnapshotcontents"]
-    verbs: ["create", "get", "list", "watch", "update", "delete", "patch"]
+    verbs: ["get", "list", "watch", "update", "patch"]
  - apiGroups: ["snapshot.storage.k8s.io"]
    resources: ["volumesnapshotcontents/status"]
    verbs: ["update", "patch"]