Merge pull request #72 from juicedata/fix/dashboard-election

add more RBAC permissions for dashboard leader election
juicedata · Nov 22, 2023 · 063dc77 · 063dc77
2 parents 8ca6286 + f688749
commit 063dc77
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 3 deletions.
diff --git a/charts/juicefs-csi-driver/Chart.yaml b/charts/juicefs-csi-driver/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: juicefs-csi-driver
 description: A Helm chart for JuiceFS CSI Driver
 type: application
-version: 0.19.1
+version: 0.19.2
 appVersion: 0.23.0
 kubeVersion: ">=1.14.0-0"
 home: https://github.com/juicedata/juicefs-csi-driver

diff --git a/charts/juicefs-csi-driver/README.md b/charts/juicefs-csi-driver/README.md
@@ -1,6 +1,6 @@
 # juicefs-csi-driver
 
-![Version: 0.19.1](https://img.shields.io/badge/Version-0.19.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.23.0](https://img.shields.io/badge/AppVersion-0.23.0-informational?style=flat-square)
+![Version: 0.19.2](https://img.shields.io/badge/Version-0.19.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.23.0](https://img.shields.io/badge/AppVersion-0.23.0-informational?style=flat-square)
 
 A Helm chart for JuiceFS CSI Driver
 

diff --git a/charts/juicefs-csi-driver/templates/serviceaccount.yaml b/charts/juicefs-csi-driver/templates/serviceaccount.yaml
@@ -306,9 +306,11 @@ rules:
   resources:
   - events
   verbs:
-  - get
   - list
   - watch
+  - create
+  - update
+  - patch
 - apiGroups:
   - ""
   resources:
@@ -337,6 +339,31 @@ rules:
   - get
   - list
   - watch
+{{- if .Values.dashboard.leaderElection.enabled }}
+- apiGroups:
+    - coordination.k8s.io
+  resources:
+    - leases
+  verbs:
+    - get
+    - watch
+    - list
+    - delete
+    - update
+    - create
+- apiGroups:
+    - ""
+  resources:
+    - configmaps
+  verbs:
+    - get
+    - watch
+    - list
+    - delete
+    - update
+    - create
+{{- end }}
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding