diff --git a/charts/csi-hcloud/Chart.yaml b/charts/csi-hcloud/Chart.yaml index f3d9bc1..fe6d066 100644 --- a/charts/csi-hcloud/Chart.yaml +++ b/charts/csi-hcloud/Chart.yaml @@ -7,5 +7,5 @@ maintainers: - name: Syself email: info@syself.com url: https://github.com/syself -version: 0.3.0 +version: 0.3.1 appVersion: 2.1.0 \ No newline at end of file diff --git a/charts/csi-hcloud/templates/controller-rbac.yaml b/charts/csi-hcloud/templates/controller-rbac.yaml index 93abb2e..81e2f68 100644 --- a/charts/csi-hcloud/templates/controller-rbac.yaml +++ b/charts/csi-hcloud/templates/controller-rbac.yaml @@ -3,55 +3,136 @@ apiVersion: rbac.authorization.k8s.io/v1 metadata: name: {{ include "common.fullname" . }} rules: -# attacher -- apiGroups: [""] - resources: [persistentvolumes] - verbs: [get, list, watch, update, patch] -- apiGroups: [""] - resources: [nodes] - verbs: [get, list, watch] -- apiGroups: [csi.storage.k8s.io] - resources: [csinodeinfos] - verbs: [get, list, watch] -- apiGroups: [storage.k8s.io] - resources: [csinodes] - verbs: [get, list, watch] -- apiGroups: [storage.k8s.io] - resources: [volumeattachments] - verbs: [get, list, watch, update, patch] -- apiGroups: [storage.k8s.io] - resources: [volumeattachments/status] - verbs: [patch] -# provisioner -- apiGroups: [""] - resources: [secrets] - verbs: [get, list] -- apiGroups: [""] - resources: [persistentvolumes] - verbs: [get, list, watch, create, delete, patch] -- apiGroups: [""] - resources: [persistentvolumeclaims, persistentvolumeclaims/status] - verbs: [get, list, watch, update, patch] -- apiGroups: [storage.k8s.io] - resources: [storageclasses] - verbs: [get, list, watch] -- apiGroups: [""] - resources: [events] - verbs: [list, watch, create, update, patch] -- apiGroups: [snapshot.storage.k8s.io] - resources: [volumesnapshots] - verbs: [get, list] -- apiGroups: [snapshot.storage.k8s.io] - resources: [volumesnapshotcontents] - verbs: [get, list] -# resizer -- apiGroups: [""] - resources: [pods] - verbs: [get, list, watch] -# node -- apiGroups: [""] - resources: [events] - verbs: [get, list, watch, create, update, patch] +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - csi.storage.k8s.io + resources: + - csinodeinfos + verbs: + - get + - list + - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get + - list + - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattachments + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - storage.k8s.io + resources: + - volumeattachments/status + verbs: + - patch +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - watch + - create + - delete + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - persistentvolumeclaims/status + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - storage.k8s.io + resources: + - storageclasses + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - list + - watch + - create + - update + - patch +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshots + verbs: + - get + - list +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: + - get + - list +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - get + - list + - watch + - create + - update + - patch --- kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1 diff --git a/charts/csi-hcloud/templates/node-daemonset.yaml b/charts/csi-hcloud/templates/node-daemonset.yaml index 4564c15..3ba1097 100644 --- a/charts/csi-hcloud/templates/node-daemonset.yaml +++ b/charts/csi-hcloud/templates/node-daemonset.yaml @@ -34,8 +34,6 @@ spec: tolerations: - effect: NoExecute operator: Exists - - effect: NoSchedule - operator: Exists - key: CriticalAddonsOnly operator: Exists affinity: @@ -114,4 +112,4 @@ spec: - name: device-dir hostPath: path: /dev - type: Directory + type: Directory \ No newline at end of file