Merge pull request kubeagi#714 from 0xff-dev/fix-helm-permission

fix: apiserver needs access to storageclass
Abirdcfly · Feb 18, 2024 · 5d2bce9 · 5d2bce9
2 parents ab9aed3 + 3e12421
commit 5d2bce9
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 1 deletion.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -601,3 +601,10 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list
diff --git a/controllers/evaluation/rag_controller.go b/controllers/evaluation/rag_controller.go
@@ -58,6 +58,7 @@ type RAGReconciler struct {
 //+kubebuilder:rbac:groups=evaluation.arcadia.kubeagi.k8s.com.cn,resources=rags/finalizers,verbs=update
 //+kubebuilder:rbac:groups=batch,resources=jobs,verbs=*
 //+kubebuilder:rbac:groups="",resources=persistentvolumeclaims,verbs=*
+//+kubebuilder:rbac:groups="storage.k8s.io",resources=storageclasses,verbs=get;list
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

diff --git a/deploy/charts/arcadia/Chart.yaml b/deploy/charts/arcadia/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: arcadia
 description: A Helm chart(KubeBB Component) for KubeAGI Arcadia
 type: application
-version: 0.2.30
+version: 0.2.31
 appVersion: "0.1.0"
 
 keywords:

diff --git a/deploy/charts/arcadia/templates/rbac.yaml b/deploy/charts/arcadia/templates/rbac.yaml
@@ -618,3 +618,10 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list