From 585325ac4b4603b22f9f487518a295301a9dafce Mon Sep 17 00:00:00 2001 From: NymanRobin Date: Mon, 18 Mar 2024 10:50:13 +0200 Subject: [PATCH] cephfs: add support for encryption in ceph-csi-cephfs chart the chart currently lacks access to configmap and secrets this causes the mounting of encrypted file systems to fail Signed-off-by: NymanRobin (cherry picked from commit 5224d58c130d08db5b1bf79e0d2c1aaedf28a923) --- .../ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml | 6 ++++++ .../ceph-csi-cephfs/templates/provisioner-clusterrole.yaml | 3 +++ 2 files changed, 9 insertions(+) diff --git a/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml b/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml index ec61a67137b..632672ebd54 100644 --- a/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml +++ b/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml @@ -14,4 +14,10 @@ rules: - apiGroups: [""] resources: ["nodes"] verbs: ["get"] + - apiGroups: [""] + resources: ["configmaps"] + verbs: ["get"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] {{- end -}} diff --git a/charts/ceph-csi-cephfs/templates/provisioner-clusterrole.yaml b/charts/ceph-csi-cephfs/templates/provisioner-clusterrole.yaml index 6272cf91885..422e97e0bab 100644 --- a/charts/ceph-csi-cephfs/templates/provisioner-clusterrole.yaml +++ b/charts/ceph-csi-cephfs/templates/provisioner-clusterrole.yaml @@ -14,6 +14,9 @@ rules: - apiGroups: [""] resources: ["secrets"] verbs: ["get", "list"] + - apiGroups: [""] + resources: ["configmaps"] + verbs: ["get"] - apiGroups: [""] resources: ["persistentvolumes"] verbs: ["get", "list", "watch", "create", "update", "delete","patch"]