csi-provisioner rbac need add resources nodes get, list, watch

[huaizong]

I0329 13:28:38.412866       1 event.go:221] Event(v1.ObjectReference{Kind:"PersistentVolumeClaim", Namespace:"default", Name:"csi-cephfs-pvc-2", UID:"7863d39c-5226-11e9-9f7e-28d24488ad30", APIVersion:"v1", ResourceVersion:"152377", FieldPath:""}): type: 'Warning' reason: 'ProvisioningFailed' failed to get target node: nodes "nvknode" is forbidden: User "system:serviceaccount:default:cephfs-csi-provisioner" cannot get resource "nodes" in API group "" at the cluster scope

provisioner 1.0 support VolumeNodeAffinity

https://github.com/kubernetes-csi/external-provisioner/blob/release-1.0/pkg/controller/topology.go#L114

		nodeInfo, err := csiAPIClient.CsiV1alpha1().CSINodeInfos().Get(selectedNode.Name, metav1.GetOptions{})

https://github.com/kubernetes-csi/external-provisioner/blob/release-1.0/pkg/controller/topology.go#L148

		nodeInfos, err := csiAPIClient.CsiV1alpha1().CSINodeInfos().List(metav1.ListOptions{})

[rootfs]

the offending code is more likely in https://github.com/kubernetes-csi/external-provisioner/blob/release-1.0/pkg/controller/topology.go#L189

	nodes, err := kubeClient.CoreV1().Nodes().List(metav1.ListOptions{LabelSelector: selector})

[huaizong]

the offending code is more likely in https://github.com/kubernetes-csi/external-provisioner/blob/release-1.0/pkg/controller/topology.go#L189

	nodes, err := kubeClient.CoreV1().Nodes().List(metav1.ListOptions{LabelSelector: selector})

you are correct,