alexlebens/external-snapshotter
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

rbac: remove unwanted RBAC for endpoint leader election

Browse Source 
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
This commit is contained in:
Humble Chirammal
2022-04-12 17:06:24 +05:30
parent 019a59a10f
commit d45bacb34b
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
deploy/kubernetes/csi-snapshotter/rbac-external-provisioner.yaml
View File

@@ -68,7 +68,7 @@ roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
--- ---
# Provisioner must be able to work with endpoints and leases in current namespace # Provisioner must be able to work with leases in current namespace
# if (and only if) leadership election is enabled # if (and only if) leadership election is enabled
kind: Role kind: Role
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
@@ -77,9 +77,6 @@ metadata:
namespace: default namespace: default
name: external-provisioner-cfg name: external-provisioner-cfg
rules: rules:
- apiGroups: [""]
resources: ["endpoints"]
verbs: ["get", "watch", "list", "delete", "update", "create"]
- apiGroups: ["coordination.k8s.io"] - apiGroups: ["coordination.k8s.io"]
resources: ["leases"] resources: ["leases"]
verbs: ["get", "watch", "list", "delete", "update", "create"] verbs: ["get", "watch", "list", "delete", "update", "create"]