helm: add RBACS for replication.storage.openshift.io

VolumeGroupReplicationContent controller needs `get`, `list` and `watch` access control for resource `VolumeGroupReplicationContents`. And `get` access control for resource `VolumeGroupReplicationClasses`. Signed-off-by: Praveen M <[email protected]>
ceph · Jan 9, 2025 · 1f3ef79 · 1f3ef79
1 parent 39c7102
commit 1f3ef79
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml b/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml
@@ -29,6 +29,12 @@ rules:
   - apiGroups: [""]
     resources: ["endpoints"]
     verbs: ["get", "create", "update"]
+  - apiGroups: ["replication.storage.openshift.io"]
+    resources: ["volumegroupreplicationcontents"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["replication.storage.openshift.io"]
+    resources: ["volumegroupreplicationclasses"]
+    verbs: ["get"]
 {{- if .Values.provisioner.attacher.enabled }}
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments"]