cephfs: add support for encryption in ceph-csi-cephfs chart

the chart currently lacks access to configmap and secrets this causes the mounting of encrypted file systems to fail Signed-off-by: NymanRobin <nyman.robin@gmail.com>
openshift-cherrypick-robot · Mar 21, 2024 · 5224d58 · 5224d58
1 parent d56c9ab
commit 5224d58
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml b/charts/ceph-csi-cephfs/templates/nodeplugin-clusterrole.yaml
@@ -14,4 +14,10 @@ rules:
   - apiGroups: [""]
     resources: ["nodes"]
     verbs: ["get"]
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: ["get"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
 {{- end -}}
diff --git a/charts/ceph-csi-cephfs/templates/provisioner-clusterrole.yaml b/charts/ceph-csi-cephfs/templates/provisioner-clusterrole.yaml
@@ -14,6 +14,9 @@ rules:
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list"]
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: ["get"]
   - apiGroups: [""]
     resources: ["persistentvolumes"]
     verbs: ["get", "list", "watch", "create", "update", "delete","patch"]