Deployment manifest of snapshot-validation-deployment was missing a
service account and hence was using the default one that exists in
kube-system namespace.
This caused it to log Failed to watch *v1.VolumeSnapshotClass
For using dynamic provisioning of volumesnapshot the snapshot-controller has to be able to create volumesnapshotcontent objects at the cluster level.
When deploying the snapshot-controller as a kops addon the controller is not able to create volumesnapshotcontent object because it lacks the create permission.
This PR adds the create permission for the content objects, which should be the default according to https://github.com/kubernetes-csi/external-snapshotter/blob/v6.0.1/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml
Danil Zhigalin
Niklas Walter
Ole Markus With
Ciprian Hacman