diff --git a/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml b/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml index e425f184050..ec61a67137b 100644 --- a/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml +++ b/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml @@ -11,9 +11,7 @@ metadata: heritage: {{ .Release.Service }} {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }} rules: -{{- if and .Values.readAffinity .Values.readAffinity.enabled }} - apiGroups: [""] resources: ["nodes"] verbs: ["get"] -{{- end }} {{- end -}} diff --git a/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml b/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml index aa8ddd4fd6b..497d5a9b190 100644 --- a/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml +++ b/charts/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml @@ -11,11 +11,9 @@ metadata: heritage: {{ .Release.Service }} {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }} rules: -{{- if .Values.topology.enabled }} - apiGroups: [""] resources: ["nodes"] verbs: ["get"] -{{- end }} # allow to read Vault Token and connection options from the Tenants namespace - apiGroups: [""] resources: ["secrets"] diff --git a/internal/rbd/driver/driver.go b/internal/rbd/driver/driver.go index 4d7061b8e1e..c4c736c3447 100644 --- a/internal/rbd/driver/driver.go +++ b/internal/rbd/driver/driver.go @@ -125,7 +125,7 @@ func (r *Driver) Run(conf *util.Config) { }) } - if k8s.RunsOnKubernetes() { + if k8s.RunsOnKubernetes() && conf.IsNodeServer { nodeLabels, err = k8s.GetNodeLabels(conf.NodeID) if err != nil { log.FatalLogMsg(err.Error())