Add privileges for Storage Operator

arangodb · Oct 15, 2019 · e01eee8 · e01eee8
1 parent cbbc8af
commit e01eee8
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/chart/kube-arangodb/templates/storage-operator/cluster-role.yaml b/chart/kube-arangodb/templates/storage-operator/cluster-role.yaml
@@ -13,6 +13,9 @@ metadata:
         app.kubernetes.io/instance: {{ .Release.Name }}
         release: {{ .Release.Name }}
 rules:
+    - apiGroups: [""]
+      resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
+      verbs: ["*"]
     - apiGroups: ["apiextensions.k8s.io"]
       resources: ["customresourcedefinitions"]
       verbs: ["get"]

diff --git a/chart/kube-arangodb/templates/storage-operator/role.yaml b/chart/kube-arangodb/templates/storage-operator/role.yaml
@@ -13,9 +13,6 @@ metadata:
         app.kubernetes.io/instance: {{ .Release.Name }}
         release: {{ .Release.Name }}
 rules:
-    - apiGroups: [""]
-      resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
-      verbs: ["*"]
     - apiGroups: [""]
       resources: ["pods"]
       verbs: ["get", "update"]

diff --git a/manifests/arango-storage.yaml b/manifests/arango-storage.yaml
@@ -48,6 +48,9 @@ metadata:
         app.kubernetes.io/instance: storage
         release: storage
 rules:
+    - apiGroups: [""]
+      resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
+      verbs: ["*"]
     - apiGroups: ["apiextensions.k8s.io"]
       resources: ["customresourcedefinitions"]
       verbs: ["get"]
@@ -95,9 +98,6 @@ metadata:
         app.kubernetes.io/instance: storage
         release: storage
 rules:
-    - apiGroups: [""]
-      resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"]
-      verbs: ["*"]
     - apiGroups: [""]
       resources: ["pods"]
       verbs: ["get", "update"]