Skip to content

Commit 6771b75

Browse files
committed
Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy
The operator needs permissions to publish and monitor NPs in the custom namespace `openshift-manila-csi-driver`. See openshift/csi-operator#424 for details.
1 parent cfcc1f7 commit 6771b75

File tree

3 files changed

+36
-0
lines changed

3 files changed

+36
-0
lines changed

assets/csidriveroperators/openstack-manila/base/03_role.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,3 +35,15 @@ rules:
3535
- update
3636
- patch
3737
- delete
38+
- apiGroups:
39+
- networking.k8s.io
40+
resources:
41+
- networkpolicies
42+
verbs:
43+
- watch
44+
- list
45+
- get
46+
- create
47+
- delete
48+
- patch
49+
- update

assets/csidriveroperators/openstack-manila/hypershift/mgmt/generated/rbac.authorization.k8s.io_v1_role_manila-csi-driver-operator-role.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,18 @@ rules:
3535
- update
3636
- patch
3737
- delete
38+
- apiGroups:
39+
- networking.k8s.io
40+
resources:
41+
- networkpolicies
42+
verbs:
43+
- watch
44+
- list
45+
- get
46+
- create
47+
- delete
48+
- patch
49+
- update
3850
- apiGroups:
3951
- hypershift.openshift.io
4052
resources:

assets/csidriveroperators/openstack-manila/standalone/generated/openshift-cluster-csi-drivers_rbac.authorization.k8s.io_v1_role_manila-csi-driver-operator-role.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,18 @@ rules:
3535
- update
3636
- patch
3737
- delete
38+
- apiGroups:
39+
- networking.k8s.io
40+
resources:
41+
- networkpolicies
42+
verbs:
43+
- watch
44+
- list
45+
- get
46+
- create
47+
- delete
48+
- patch
49+
- update
3850
- apiGroups:
3951
- monitoring.coreos.com
4052
resources:

0 commit comments

Comments
 (0)