Fixed cluster roles for openstack cloud controller (kubernetes-sigs#8638

)
sakuraiyuta · Apr 16, 2022 · 10c5e1b · 10c5e1b
1 parent 7ebd0f0
commit 10c5e1b
Showing 1 changed file with 43 additions and 0 deletions.
diff --git a/...d_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2 b/...d_controller/openstack/templates/external-openstack-cloud-controller-manager-roles.yml.j2
@@ -50,5 +50,48 @@ items:
     - patch
   - apiGroups:
     - ""
+    resources:
+    - serviceaccounts/token
+    verbs:
+    - create
+  - apiGroups:
+    - ""
+    resources:
+    - serviceaccounts
+    verbs:
+    - create
+    - get
+  - apiGroups:
+    - ""
+    resources:
+    - persistentvolumes
+    verbs:
+    - '*'
+  - apiGroups:
+    - ""
+    resources:
+    - endpoints
+    verbs:
+    - create
+    - get
+    - list
+    - watch
+    - update
+  - apiGroups:
+    - ""
+    resources:
+    - configmaps
+    verbs:
+    - get
+    - list
+    - watch
+  - apiGroups:
+    - ""
+    resources:
+    - secrets
+    verbs:
+    - list
+    - get
+    - watch
 kind: List
 metadata: {}