diff --git a/cluster/charts/rook-ceph-cluster/templates/role.yaml b/cluster/charts/rook-ceph-cluster/templates/role.yaml index 36719cab5c88..af88cd8fb8ff 100644 --- a/cluster/charts/rook-ceph-cluster/templates/role.yaml +++ b/cluster/charts/rook-ceph-cluster/templates/role.yaml @@ -82,7 +82,7 @@ rules: verbs: ["get", "list", "delete" ] - apiGroups: [""] resources: ["persistentvolumeclaims"] - verbs: ["delete"] + verbs: ["get", "update", "delete"] {{- if .Values.monitoring.enabled }} --- diff --git a/cluster/charts/rook-ceph/templates/role.yaml b/cluster/charts/rook-ceph/templates/role.yaml index 70f899c5dc40..c27c11cd5f49 100644 --- a/cluster/charts/rook-ceph/templates/role.yaml +++ b/cluster/charts/rook-ceph/templates/role.yaml @@ -188,5 +188,5 @@ rules: verbs: ["get", "list", "delete" ] - apiGroups: [""] resources: ["persistentvolumeclaims"] - verbs: ["delete"] + verbs: ["get", "update", "delete"] {{- end }} diff --git a/cluster/examples/kubernetes/ceph/common-second-cluster.yaml b/cluster/examples/kubernetes/ceph/common-second-cluster.yaml index cbe12e5337dd..e88e4230336d 100644 --- a/cluster/examples/kubernetes/ceph/common-second-cluster.yaml +++ b/cluster/examples/kubernetes/ceph/common-second-cluster.yaml @@ -145,7 +145,7 @@ rules: verbs: ["get", "list", "delete"] - apiGroups: [""] resources: ["persistentvolumeclaims"] - verbs: ["delete"] + verbs: ["get", "update", "delete"] --- # Allow the osd purge job to run in this namespace kind: RoleBinding diff --git a/cluster/examples/kubernetes/ceph/common.yaml b/cluster/examples/kubernetes/ceph/common.yaml index 51ae1d858d87..2ad6398570fc 100644 --- a/cluster/examples/kubernetes/ceph/common.yaml +++ b/cluster/examples/kubernetes/ceph/common.yaml @@ -1195,7 +1195,7 @@ rules: verbs: ["get", "list", "delete"] - apiGroups: [""] resources: ["persistentvolumeclaims"] - verbs: ["delete"] + verbs: ["get", "update", "delete"] --- # Allow the osd purge job to run in this namespace kind: RoleBinding