diff --git a/ee/ucp/release-notes.md b/ee/ucp/release-notes.md index feff3df02b..67a454033c 100644 --- a/ee/ucp/release-notes.md +++ b/ee/ucp/release-notes.md @@ -36,6 +36,25 @@ upgrade your installation to the latest release. ``` $ sudo yum downgrade container-selinux-2.74-1.el7 ``` +- Attempts to deploy local PV fail with regular UCP configuration unless PV binder SA is bound to cluster admin role. + - Workaround: Create a `ClusterRoleBinding` that binds the `persistent-volume-binder` serviceaccount + to a `cluster-admin` `ClusterRole`, as shown in the following example: + ``` + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + labels: + subjectName: kube-system-persistent-volume-binder + name: kube-system-persistent-volume-binder:cluster-admin + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cluster-admin + subjects: + - kind: ServiceAccount + name: persistent-volume-binder + namespace: kube-system + ``` # Version 3.2.0-beta (2019-5-16)