ivampiresp/longhorn
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add missing webhook RBAC rule for uninstaller

Browse Source 
Longhorn-2034

Signed-off-by: Chin-Ya Huang <chin-ya.huang@suse.com>
This commit is contained in:
Chin-Ya Huang 2022-03-28 19:05:25 +08:00 committed by David Ko
parent 19719de0c5
commit bd3655b122
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
chart/templates/clusterrole.yaml
View File

@ -53,4 +53,4 @@ rules:
verbs: ["list", "watch"] verbs: ["list", "watch"]
- apiGroups: ["admissionregistration.k8s.io"] - apiGroups: ["admissionregistration.k8s.io"]
resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"] resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
verbs: ["list", "create", "patch"] verbs: ["get", "list", "create", "patch", "delete"]

3
uninstall/uninstall.yaml
View File

@ -73,6 +73,9 @@ rules:
resources: ["podsecuritypolicies"] resources: ["podsecuritypolicies"]
verbs: ["use"] verbs: ["use"]
resourceNames: ["longhorn-uninstall-psp"] resourceNames: ["longhorn-uninstall-psp"]
- apiGroups: ["admissionregistration.k8s.io"]
resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
verbs: ["get", "delete"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding