snapshot: add rbac for distributed snapshotting

Signed-off-by: Moritz "WanzenBug" Wanzenböck <[email protected]>
krmichelos · Jun 15, 2022 · ca8c40c · ca8c40c
1 parent 3b23540
commit ca8c40c
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/charts/snapshot-controller/Chart.yaml b/charts/snapshot-controller/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 type: application
 name: snapshot-controller
-version: 1.5.0
+version: 1.5.1
 appVersion: "v6.0.1"
 icon: https://raw.githubusercontent.com/piraeusdatastore/piraeus/master/artwork/sandbox-artwork/icon/color.svg
 maintainers:

diff --git a/charts/snapshot-controller/templates/serviceaccount.yaml b/charts/snapshot-controller/templates/serviceaccount.yaml
@@ -40,6 +40,11 @@ rules:
   - apiGroups: ["snapshot.storage.k8s.io"]
     resources: ["volumesnapshots/status"]
     verbs: ["update", "patch"]
+  {{- if get .Values.args "enableDistributedSnapshotting" }}
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  {{- end }}
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1