helm: add RBACS for replication.storage.openshift.io

OMAP regenration of VolumeGroupReplicationContent requires `get` access control for `volumegroupreplicationcontents` and `volumegroupreplicationclasses`. Signed-off-by: Praveen M <[email protected]>
ceph · Jan 8, 2025 · 967098d · 967098d
1 parent 0cfa2b6
commit 967098d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml b/charts/ceph-csi-rbd/templates/provisioner-clusterrole.yaml
@@ -29,6 +29,9 @@ rules:
   - apiGroups: [""]
     resources: ["endpoints"]
     verbs: ["get", "create", "update"]
+  - apiGroups: ["replication.storage.openshift.io"]
+    resources: ["volumegroupreplicationcontents", "volumegroupreplicationclasses"]
+    verbs: ["get"]
 {{- if .Values.provisioner.attacher.enabled }}
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments"]