Fix ceph-provisioner rbd-healer error

This patchset fixes the following error which was recently introduced
by changing the cephcsi image version to v3.4.0:

E0816 18:37:30.966684   62307 rbd_healer.go:131] list volumeAttachments failed, err: volumeattachments.storage.k8s.io is forbidden: User "system:serviceaccount:ceph:clcp-ucp-ceph-provisioners-ceph-rbd-csi-nodeplugin" cannot list resource "volumeattachments" in API group "storage.k8s.io" at the cluster scope
E0816 18:37:30.966758   62307 driver.go:208] healer had failures, err volumeattachments.storage.k8s.io is forbidden: User "system:serviceaccount:ceph:clcp-ucp-ceph-provisioners-ceph-rbd-csi-nodeplugin" cannot list resource "volumeattachments" in API group "storage.k8s.io" at the cluster scope

Change-Id: Ia7cc61cf1df6690f25408b7aa8797e51d1c516ff
This commit is contained in:
Parsons, Cliff (cp769u) 2021-08-17 03:39:27 +00:00
parent 3a76480c00
commit fa174c00db
3 changed files with 6 additions and 2 deletions

View File

@ -15,6 +15,6 @@ apiVersion: v1
appVersion: v1.0.0
description: OpenStack-Helm Ceph Provisioner
name: ceph-provisioners
version: 0.1.12
version: 0.1.13
home: https://github.com/ceph/ceph
...

View File

@ -25,7 +25,10 @@ metadata:
rules:
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get"]
verbs: ["get", "watch", "list"]
- apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments"]
verbs: ["get", "watch", "list"]
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1

View File

@ -12,4 +12,5 @@ ceph-provisioners:
- 0.1.10 Add check for empty ceph endpoint
- 0.1.11 Limit Ceph Provisioner Container Security Contexts
- 0.1.12 Add ceph mon v2 port for ceph csi provisioner
- 0.1.13 Fix ceph-provisioner rbd-healer error
...