chore: add RBAC lease

kubernetes-sigs · Feb 2, 2020 · d75f0ea · d75f0ea
1 parent e17cf0f
commit d75f0ea
Show file tree

Hide file tree

Showing 8 changed files with 40 additions and 16 deletions.
diff --git a/charts/latest/azurefile-csi-driver/Chart.yaml b/charts/latest/azurefile-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
 appVersion: latest
-description: Azure file Container Storage Interface (CSI) Storage Plugin
+description: Azure File Container Storage Interface (CSI) Storage Plugin
 name: azurefile-csi-driver
 version: latest
diff --git a/charts/latest/azurefile-csi-driver/templates/rbac-csi-azurefile-controller.yaml b/charts/latest/azurefile-csi-driver/templates/rbac-csi-azurefile-controller.yaml
@@ -64,7 +64,9 @@ rules:
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments"]
     verbs: ["get", "list", "watch", "update"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -96,7 +98,9 @@ rules:
   - apiGroups: ["csi.storage.k8s.io"]
     resources: ["csidrivers"]
     verbs: ["create", "delete"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -149,7 +153,9 @@ rules:
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
     verbs: ["create", "list", "watch", "delete"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding

diff --git a/charts/v0.2.0/azurefile-csi-driver/Chart.yaml b/charts/v0.2.0/azurefile-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
 appVersion: 0.2.0
-description: Azure file Container Storage Interface (CSI) Storage Plugin
+description: Azure File Container Storage Interface (CSI) Storage Plugin
 name: azurefile-csi-driver
 version: 0.2.0
diff --git a/charts/v0.3.0/azurefile-csi-driver/Chart.yaml b/charts/v0.3.0/azurefile-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
 appVersion: 0.3.0
-description: Azure file Container Storage Interface (CSI) Storage Plugin
+description: Azure File Container Storage Interface (CSI) Storage Plugin
 name: azurefile-csi-driver
 version: 0.3.0
diff --git a/charts/v0.4.0/azurefile-csi-driver/Chart.yaml b/charts/v0.4.0/azurefile-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
 appVersion: v0.4.0
-description: Azure file Container Storage Interface (CSI) Storage Plugin
+description: Azure File Container Storage Interface (CSI) Storage Plugin
 name: azurefile-csi-driver
 version: v0.4.0
diff --git a/charts/v0.4.0/azurefile-csi-driver/templates/rbac-csi-azurefile-controller.yaml b/charts/v0.4.0/azurefile-csi-driver/templates/rbac-csi-azurefile-controller.yaml
@@ -64,7 +64,9 @@ rules:
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments"]
     verbs: ["get", "list", "watch", "update"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -96,7 +98,9 @@ rules:
   - apiGroups: ["csi.storage.k8s.io"]
     resources: ["csidrivers"]
     verbs: ["create", "delete"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -149,7 +153,9 @@ rules:
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
     verbs: ["create", "list", "watch", "delete"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding

diff --git a/deploy/rbac-csi-azurefile-controller.yaml b/deploy/rbac-csi-azurefile-controller.yaml
@@ -29,7 +29,9 @@ rules:
   - apiGroups: [""]
     resources: ["nodes"]
     verbs: ["get", "list", "watch"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -64,7 +66,9 @@ rules:
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments"]
     verbs: ["get", "list", "watch", "update"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -93,7 +97,9 @@ rules:
   - apiGroups: ["csi.storage.k8s.io"]
     resources: ["csidrivers"]
     verbs: ["create", "delete"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding

diff --git a/deploy/v0.4.0/rbac-csi-azurefile-controller.yaml b/deploy/v0.4.0/rbac-csi-azurefile-controller.yaml
@@ -29,7 +29,9 @@ rules:
   - apiGroups: [""]
     resources: ["nodes"]
     verbs: ["get", "list", "watch"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -64,7 +66,9 @@ rules:
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments"]
     verbs: ["get", "list", "watch", "update"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding
@@ -93,7 +97,9 @@ rules:
   - apiGroups: ["csi.storage.k8s.io"]
     resources: ["csidrivers"]
     verbs: ["create", "delete"]
-
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
 ---
 
 kind: ClusterRoleBinding