From 2cad8da61c271f166e8a53c5c6866560e0466413 Mon Sep 17 00:00:00 2001 From: Ravikiran Singh Date: Wed, 10 Mar 2021 10:54:41 +0530 Subject: [PATCH] PV provisioning fails when storageclass has volumeBindingMode as 'WaitForFirstConsumer': 1. Adds RBAC permissions to get nodes in the cluster. 2. Bumps the chart version --- charts/nfs-subdir-external-provisioner/Chart.yaml | 2 +- .../nfs-subdir-external-provisioner/templates/clusterrole.yaml | 3 +++ deploy/objects/clusterrole.yaml | 3 +++ deploy/rbac.yaml | 3 +++ 4 files changed, 10 insertions(+), 1 deletion(-) diff --git a/charts/nfs-subdir-external-provisioner/Chart.yaml b/charts/nfs-subdir-external-provisioner/Chart.yaml index 41cf550c..609562c9 100644 --- a/charts/nfs-subdir-external-provisioner/Chart.yaml +++ b/charts/nfs-subdir-external-provisioner/Chart.yaml @@ -3,7 +3,7 @@ appVersion: 4.0.2 description: nfs-subdir-external-provisioner is an automatic provisioner that used your *already configured* NFS server, automatically creating Persistent Volumes. name: nfs-subdir-external-provisioner home: https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner -version: 4.0.9 +version: 4.0.10 kubeVersion: ">=1.9.0-0" sources: - https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner diff --git a/charts/nfs-subdir-external-provisioner/templates/clusterrole.yaml b/charts/nfs-subdir-external-provisioner/templates/clusterrole.yaml index 3a009364..078cfccc 100644 --- a/charts/nfs-subdir-external-provisioner/templates/clusterrole.yaml +++ b/charts/nfs-subdir-external-provisioner/templates/clusterrole.yaml @@ -6,6 +6,9 @@ metadata: {{- include "nfs-subdir-external-provisioner.labels" . | nindent 4 }} name: {{ template "nfs-subdir-external-provisioner.fullname" . }}-runner rules: + - apiGroups: [""] + resources: ["nodes"] + verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["persistentvolumes"] verbs: ["get", "list", "watch", "create", "delete"] diff --git a/deploy/objects/clusterrole.yaml b/deploy/objects/clusterrole.yaml index d8564a7a..1b5c2efe 100644 --- a/deploy/objects/clusterrole.yaml +++ b/deploy/objects/clusterrole.yaml @@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1 metadata: name: nfs-client-provisioner-runner rules: + - apiGroups: [""] + resources: ["nodes"] + verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["persistentvolumes"] verbs: ["get", "list", "watch", "create", "delete"] diff --git a/deploy/rbac.yaml b/deploy/rbac.yaml index 85a76d02..28dbb68d 100644 --- a/deploy/rbac.yaml +++ b/deploy/rbac.yaml @@ -10,6 +10,9 @@ apiVersion: rbac.authorization.k8s.io/v1 metadata: name: nfs-client-provisioner-runner rules: + - apiGroups: [""] + resources: ["nodes"] + verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["persistentvolumes"] verbs: ["get", "list", "watch", "create", "delete"]