fix: apiserver needs access to storageclass

kubeagi · Feb 2, 2024 · d8ff21e · d8ff21e
1 parent b4556df
commit d8ff21e
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -601,3 +601,10 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list
diff --git a/controllers/evaluation/rag_controller.go b/controllers/evaluation/rag_controller.go
@@ -58,6 +58,7 @@ type RAGReconciler struct {
 //+kubebuilder:rbac:groups=evaluation.arcadia.kubeagi.k8s.com.cn,resources=rags/finalizers,verbs=update
 //+kubebuilder:rbac:groups=batch,resources=jobs,verbs=*
 //+kubebuilder:rbac:groups="",resources=persistentvolumeclaims,verbs=*
+//+kubebuilder:rbac:groups="storage.k8s.io",resources=storageclasses,verbs=get;list
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

diff --git a/deploy/charts/arcadia/templates/rbac.yaml b/deploy/charts/arcadia/templates/rbac.yaml
@@ -618,3 +618,10 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list