Allow snapshot controller to create volumesnapshotcontent

For using dynamic provisioning of volumesnapshot the snapshot-controller has to be able to create volumesnapshotcontent objects at the cluster level.
When deploying the snapshot-controller as a kops addon the controller is not able to create volumesnapshotcontent object because it lacks the create permission.
This PR adds the create permission for the content objects, which should be the default according to https://github.com/kubernetes-csi/external-snapshotter/blob/v6.0.1/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml
This commit is contained in:
Niklas Walter 2022-10-15 00:54:38 +02:00 committed by GitHub
parent 5ea0839e17
commit 858bdbacfd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions

View File

@ -1074,6 +1074,7 @@ rules:
resources:
- volumesnapshotcontents
verbs:
- create
- get
- list
- watch
@ -1280,4 +1281,4 @@ metadata:
snapshot.storage.kubernetes.io/is-default-class: "true"
driver: ebs.csi.aws.com
deletionPolicy: Delete
{{ end }}
{{ end }}