From 9211889e27957f31892c56d6e1eb19d303178d1d Mon Sep 17 00:00:00 2001 From: andyzhangx Date: Sun, 8 Dec 2024 08:07:03 +0000 Subject: [PATCH] chore: add rbac roles for resize volume feature fix fix --- charts/latest/csi-driver-nfs-v0.0.0.tgz | Bin 11440 -> 11473 bytes .../templates/rbac-csi-nfs.yaml | 36 ++++++++++++++++++ deploy/rbac-csi-nfs.yaml | 36 ++++++++++++++++++ 3 files changed, 72 insertions(+) diff --git a/charts/latest/csi-driver-nfs-v0.0.0.tgz b/charts/latest/csi-driver-nfs-v0.0.0.tgz index 2a3eca635846cd345e2392c5762f59e067fe3852..7036ac3cd98cab7c6160e7202a21c26fbb500218 100644 GIT binary patch delta 10094 zcmV-!Cz05&SBCL~LK#si2&4}Jd9A_*QruZ0jo11#VYQr1HpMnp(H?OgpybO_U5 z=}?$r>fw+wK_uhT9vX$bL)gL9pF|)e9uYbU1Q`WFGLA=ZK!+lYvk{?1Wr;^U6k>|` zw0M_haeTpIe-ci6=xlh-|P7{aDmcK5$V`M4y%bs)$UUbq+h- zr4hLVL4I2o32rLa5IF1{9<6{upW;-EnUw2dAxZ!>O#Za|P{d>c6ok0oYyhj{kylSu z^%@pOox|g0(V#2>vp8Lv*6^Bxq5$QRk>{Xh5nFnqf8dh@PI0`^Y~?c*gp5kg;&|N| zYYE^J62hx6WEqtTlaK?J&_j}EfcDT|$3XSp`^c6>*c2A%n#3_0fUOc~HDJoJ4(fwM zlA$4v1t2n1FVQuo`ei0S{pN^W(~fGd=z>uh=ukM_3Is-b=o}}2*bwzC1{Pff&S{=; z1w3k*f7vgg=_yna;S4Dyul9y*v{eh`zvfqmI(Iip@6KRfy@e@&7x39;y*!xln{`X!8}@1`mA&?T6W zQN=R)mcGG4k#m8hetBY`UBs9=_g2{7ATved65_apkYq7%Y^GihV}Pz;+Cyzk^_<1fxhgbsB}WoHNo^|| zSgLBPrrWPS5g|qX0fs{eWe>H_Sw9>@f0V`0UJAaYo>a~EjkgkPshJZyps%8cQSp|> z({*8T5G>;%*xB%_C^1QhbkwE<5-szOyWKaWm9GW=$UwNI!Zhol!)`KD?I^D`tB2fR zOP&?1skNgGTk|RvO^qFH*qEcx-b8;|dU2W&y6Ww1in0WM`h^y7jC8L`+a*Nwf74r$ zXI>Vp@!9QCNV9TzheY{w6QXQTON|N=mFu=4TEG6e(mYockh-2RGrMk=XFFW)ZmqMm z(cD8PT5UlStyC4gK_{1|LaU^DGkj@rI0a4MB}Ep4qE%#s_Q((krSWPl*=TC{IM#nF zZ3w7Dm`3$4YSc6eb-mi?(?ps{57CVYtZRxNi{Zp%1^d_E2DHtZl0* zCXH+u|sA6a5XO^$rnn4qW)qy`UgTIf4xsoyTG#~frwyR!0lc> zqJf&532^c9xO4c8+NEpuUkOR7?fwVnZ{NM{cjPCzc^ixTKTnTe)a<{{o*h5k*?({2 zLGQ*;_v#RVMj)k<3K66+n?j@(4Q;$BmzsABg<}Y>>a|lA2_z(znb=2Z3|Ii-8SS-N z2q}RY$`}PDe~-WX{26sFL6_^C=Wo%MFA4_(EC_^EEMK;9n%2cK6%tbqAoS%+8wJ5N zmf`rWhxy(rvbY!}zD`)}#A09oe`+uGvA3fjk|7|>5 zYonn2qSkWMF;NDZM?3G0$5EAhI|0r~1n76AQqvGUf2#i^Nk1D7$tTnfN?<@E{kK6a z)($MK(u^Ta%6$a#;$?~(VCHY7GB(SW9%}ofi?>dKDIP%-45qbOx$(KFqE(zee?~bM zx`Wthf2>zH*mY}WY+n_Ad|OS8N=J+j^kh|v+Rg;!o4n@ldUK|var=*L)c)AEu+(Uh zVKH^C3lZtTMw0yvC$Yc8?}*SyZH12X@EdSyHfs}m*PQWfJdN@{CD(Iq^_YY@f7bLdw@jn;q^PafItYT68+3$IqJUAo zr_DEolf%{(p-~T=G{9^nAaR5x)^gk3#_Mfn=|&s@)#7rHkvIZgk(ZNh=TFvIic=Ec zRP99}s*2YhYUh@a5s~9;&N#vi@3XpXq?H7%=tXI7ApxxGr&{0FkJA zr}vQ@6M?LmO}JWE83LgCXY67Z?@!Q>vjkm_NjNrj3-H%ipvR2o_QofL!O_##MHIr0 zf!R^p0U{(&X=vdj#w1Y_Rq20U7ruCZQt7^soX}BY?+er_woNgo)B0~+Du=5cztNQq z{tls3+KdT*P&-?h(np-IG#FjL3*Nvv9zcn1185c6ns7fi@#(DsK|I3QKjo+4k%^BFankc za5zRxj)8ZOwV|Rnzx3ZJ@ndj>$ar~7AP*kZ#10X*|IL&(U>S|PST;@1!q29D+uPY$Bh4O9GB_Q!8${D(Sqf_3e@BzTMOsGk_7VRTZ;tMs12*H!qj>Uf5ox!>+frp zPVf|Q&{8F%4m=y9jov6Vh0q}@eRU%ua}_#dNs>__rzT{E3^K{MIEY{Zv5qOkJRB1V zq0BfODE(KXPL0N%M0e>{yeks51NOiGzj&}ueFh%6{wXt8~w_Z3<ez~9rL=#c{e{F48ETyTzQR|#g ztA|$q%jKdT?aEownE{H>J56*1Vom5INiwNJb?{IY5|hzR*^e0*&0W!7o78V#;aV>n z>pC5;Dc4@02wnIfHEP&aVJ&we4N#rowu00RgU}*N@_6!CMe?SMIE#>vyWW+!y4X@a^C<*S_#`y>bH4~4&c!L1QpT=#<5`@xN zw}DV_Lw_oZ`SQCmOlS9WzRs2U!R*8}O_AMNHo!IWrl+k4l2FT4RTWSKR~~qC8*c!+ z;bfYRW~635G74{pvvV30`@Uylu?4QSTMub7c8+p+R9jRd zm`zxi56MiTf9rhoun;UHdPyyjMa0TZcYK$deFxq(kz+GW4&)qBJu7NVbX1%iD`lQ8 zOJXMGPVI!SokXVvt+iKx>RBBCP?TVPHKRirwDW%M+xWzOMe`V95^KmKpr8#sN=Pb2 zv4dVGsr1d9)v<}0VI0To+6H{dLSWU@C^SzL6=I?Ce>SknlSet7kyvKCJV!k>1suKJ zXzLm0YOPSpB~J>23HIy{&2z%2(ht;bAQRToGA;I*1CZBhGL|)=e}#<*zl!EHt(^@$FiWXMAlgSn7NT2}vfJOr7;BdC0M$%f&U!pGLuyPHa}}H^ z$PPMx`|h<*Y`lOPg_9XZqb~Y9tQLT2=e+9R>m$EI(UEusLh~}2Gdl}o*o$Q)mxX7oW%G8B9>6erh3zOxO77;Ojd}&wN9K+^aoqA$68Yxy* zixnxXPSnmBCKL&vf=Ds}SNrrVL1?i>MtYZ^nE{jYmmf2&*I2m2<~J%VmK_VRo@06_ zBOew>n6jXwf-Mn<;Tu9vXohd`Y+fqou);Enr?UiUbU#Y=F%#fhRhC^l=dYA=6pVQq zKm(cvDX-*zT4L#3xKR351i5b%x@*#)vj~$eqWz9%(DtmeUZ5xeY(qg*2MGmHcUjC^ zRcE7d+@UC<9%c!9F0<6Az5r9-&n^h)@YB6nkP5QTC&~@*n9B)1eR2~uQj?fh=K<7K zJ^MJAN)XHIkPaVsz^Ily|M>pNe?0j;|MABsPaZ%1@Rv6~y}Nk*D|zz! z2bv{+SLWC6k3YccUzY^(DMQLGh(M8&EMY0#_t2}0GdK3jOm_~5LkMJ| zmc47tsrIXxu{T*A6zG&uVVA=axU-XR6Bd8X0(swDJgdzSM*nKy^iaFu$j3nrW;WKd z#QJ~hM19Q=YL(6Q_wE8tzoIbH?F5$YLP?uLNw*X{x(gRwCS3Fu0z~guNa)uV0J>?Y z=Y~O@8-{Og9H{wlLo&Aze7Sj;<;DS(HyAp3C-I7#Mkj6~7IE{)!;Rw%H;pRXVhn%b z4MYrX8XvfMG~l-s`?uw2znhBh`-&s_Hjm%iLbTpiV)HhR#CxdZcAsMEwiQ9QrFgl` zqvJM@h1*Kx+m_!tiftt_ z>~2^_9nOZ6jK1YqWp3VIIS}p5Ju4?bbYg!mjO47u zS)97B7Db$#f&`vu7ht|?X|kx~+Y&kEEE`orZ+({1(ll+ZO0&0-5Gkzn#uufa3wlCU z^cTXYxf-I{U*9KBzwd7{E<0X@v!}dk#H=9LV;ynLui8$cG-F|g*omc>ar3;&+X)vO zh*ztXFun|H+1FNQDU8vO&{=<1K<=ya00tK{=71=p;q%%7t_0 zqFPYx)R&YpK67MM=By=aYG9is59%8ow3q=+tnEvE$zxm3Sle7n)2=IVMWKBE<27x& z_e3f5((zP~5XVi2gBfi$jcVMkAeEg0sihjPHPML5;>K$NJAeEE5I}#kr0!(0SNv38 zUglS7E+)w0n${*lEN(oR2^zP(u_g3~jWLa4EjDJ-(s`(^DbQn=LGQkXM7fuExy4;gn0ap2{nj24)@;oSLn3jqvj2xYnElXvm!K$TB@RdN&3Eu9#ve{zs;- zg>xb<*4wUm^)3Cu)h>UxaL#4flP&i~=lxc7-CcC{%|vG#0@@@*TSM4Zoc20@5u3=mIgd5ozY-2C*RcQbBTHoItb9f*+{e#!ym-ol) zJTMQ#17qa;Ex2GDQ&Xc8#*|s)hOsC&`(etz7PwyuoHlg8Jh)FZ3$?TMAxl!V@>ZPY zCE65er~VwYRy$FzhHzxX&EmbdZ~1M|P6`3$YAJK0Ntd@2ud-v;NBFm}ZErlff6_n8 z*Or`$Y#53TvGpixrEHT;7h!*&KktF1qV8PS`9*iGoqMQ2Ncedsu$g`=HiIp(HkHp@bI&r0ln3Tk3}`-Fw`5XVbr_Z~vUxym$?WEV zyu2aqN5=CoWSx3RZB&Vo`5w51O=33q7iW?sSXwZ?Nad6M*&L7(I1+y(f)Km$%T=wo zZ5uR98a3bi6f$mnK9T42yRp-$j(g*p#lB8h;Ug~{ES#TVb_by1&sc@3@Jqzz%wax2~i=^b^R7I2#eF zl*-3XOoaK+n{rySV`P6%wKvbtoN-+{(MWzWtYRj3%y_voed0m5fsGO4GwB1BEctsT zWSMCVJC?*oI<2XFH=pe!@Bg2**?o!gPt^*wRA`Ru-$wp=5+f8ICS$e?T;=bWF-|b*G2!yiPg_(b2TpBlLgPU$*L|eU3 zZ}U6Ys+76p#cK_Pjm$7>%o`Rh5;6T+@mz=}>hJ1tnCmff!U{a&l%L7g+P|6+o15)l z|NQSCNeqSy{`JrQQBvn$|NQSCVisQg>!1I#bYkyn#E2D+2DwMVVCmH|RX`%O)ITCgWva~)lu zCeD52S~-iza0ogxhX9>+^PWx+m>A`8d+?jhNMTA?+N5Ol%?8O)w8UVmOL!NZbs zaw=WIuqKlY8W?|O4Y#9M#6@`lJ+jd;_C&dFS4JYjAv9hMH(}xcOg0MddBD|F-F<_E zPPnz4{jpi=)6^Z=#5NAPW1Ob2ymsP&yso~|WNgcy3jMvhIID-k*{SsI78kDEx~JL- zy14B}XG7B%FLPoNFjG<3?hv6u0*>aWNfZH1yg3iGJDkd#Oo;{hk55%}+rKz5s?^F%#SBAuue*#SXq(w}09ojucZW@h8<%sI-lyk<|&~G&fI_BA}ELh~psN`(NX! z8ijn~Y+6{%klQU$&}ecLmbDS{f&JXh9`DA|8!5{J!KEs!yb=01{ejOnPzTR6;Q z#$mlw53`oy{P9?f>w@FXY_3aojxLw)@R93jo7=g0IYik6_=Ldq!8PMogpLA5nt@HZ zbfDLtgFXGv+I`Ur*s>j}tadlqE7guTSgTXHYhn3y>`^}tWvbP!X-0*NZD1xMP=X^U zQ}BP>Fe$46)#>HJX<*}e0!$7TiVd>^_qrv2SrqbucLD-0tI=I?4YwyKQ; zY&NIDeP5bE&@YsH@~&-^2?&`^)~Fx?4OxF=l9OVJ2$j!|JLoOd_4o6Lu|z3O{}uVK zL;d5wiGMr)FFSNq{xdk!N~?k>b^P$(Uvz`+VbDGFK`^^ zE1x^NIMvOiX1A$2HQPhWtJbi>?{4t?s&cU5`+a|BZBg0zd1yr?bKhsv|Ph~o-TR` zF<=3m(uDWrOY8GzL}(ai5ui35icX9N5Q{eIpx?FWno4w}%H^R}9MYJCSTwbse>WHi zh#{2ub}GR#9RI8v$oU$l>EeC}$+3iy4Vp4S#a|~c`EHupx;Z~t42m&aqTkOAgcT62 zMx-feLWV^RlHd_sWO3Ywkb@L|CG`3ijh$qF!%5s+yFl|#C7@h>6)(n2$a9d_j9;06 zU4-_WYjhBf1w#}d(vFfuZD$Z23MYsqBKaa2QDI}(8pfe0P`0n+Jqh7esCP=|b*im? zc3>IG42PUQuSotWPjF{ZFYleyJ6RplF6o;U99fLZCW z>{zFqFizyO40UKAqnUy(Ifa@2#HfT%vYavjq1tU+a5f}W#mz{I%Z#f1_o)d=pW8*r zVlaBE!=cX0l?bf#4Z1pil9AqOeJ=x^c+1Z87>f%IL-Gl=5874s?}UO}lr@yBWr9e? zr>>;3@}!5_&iI=811#VYQii^KnfW#kc5hK>iAU(mm$n&zSiq9_Y_Cms(6u<=BT+Z^ zw}Z*cqxQ_pKurXWBBc?({KMl{r>B>%`~4@Lf-&F-c%bQ@FuJ&ZM0us@%ccd`0|Y)v zjsqiqgM7t$sie23@DQ-fI0Pf5Grs&Yql{m?zl1QxBr(#ssitBGmdTfgN8N5ET?)`i zedz2V7Be*UI2$!bJ*4zi_5Y4w;Z=R|)xzajJiPOo7Gb!$AR|nSemsv0v(4_oKUI{(S7$Vf;CNtgW7Axv(DNTU6I&`t9+u zo9}Bme(skww$9Uyu)VzImR_H?x76lxJicYkVLiQIv8=dHOS(JaO`N?R6FQLRFyf6! zja%UEm`s3z5NdBQfMu9FuW_L&Y?rs^fSzTuYT-3Gds{6o!`D>?ZlZQmQqM-gU{A$N zfw7cnke{?bd>OM4$73dB&%ep7Vm<~O%kc%{vWm2UJb8Jv67yAI-}hCug6#v*rs+^D z!==u;K}iC+HU z@%h`+*B{SLecDAKb^h@9q<{AD_4(<=+q3g`zM{s{q^Q`%#-0wehHOtY&GA7BJRw56 z%RIG>R49x1A?0zO24X~b!>HJDT0Wf;?gwU*OazRYgGl!7^#+i(^jm5Uj}}w6f0UwR zhu^0t{m7Z;jH(U=@SZwykAY~1fi|noTs4xn>`tj)Ps=Fz)H^t6TEHq2wu;UWlQ`q> zZp=Z9SseAyv&wh1sQm=8-Uq#~p<<1zeND~EU>3FC>K_@GO_twf7ezveBse~W7*G2q zJg|qJR$cver7k`nRzIh}35)!de;2QeDT_o&!Og3q)6J`Fps3D}@__>2t;Si3M^-4c ze{hd&)ye-hO>~&W7a>_!^8M=rg?AAAxY)*lyDtJ zaMym{{8{M#Hy;TdvK#XMce~HJGyebM7sosQ|7|=$5LDd#Gs%c-bihgff6V4Nn;QsF zUCIl$J(d!O=2Qi${m{5Di zofQoMdYz6T0gmHV)vq}h(vSV0ILlJAHtXU;;k@Y~rQKHm-u3)#`Yhysr5voy`Q}*= z|MT?uagF~EUmQJuy5s-blR70J3k!OJKm9`S1d~`XlVv57e~x*p+_5S{TXRY=m)Z-R zVmW^KhsURvXYXHMe!P7B)5reXlfQhtc=hhjPnNNX`YQS@l+A`6owBaj?3kZT-7u~G z<(D5`f7IsK^H*#xqHk3ym6a>gJRgKxbX^JO>G|D;$k3tqN}N(VH)E5C zM2mcEMgjRYf4pluztwH~tyWTRZ`fnCnZNpm*P^?3mNi(MQ(GVY%!Jh4f1B2}yw#p4 zno(Mc=}gFI{jPI&I6#I6dD+fP*=CSI{hGbGKs(V)PiKVXYD@X*u0Ahytmo$QX@m3p zes8%su77{rkDK)Sqt(TxOSOd->3W-x{rrwBAZ~-Pf7+$a%nw@3N~<=i zuipHOh9m|g#_U?4F}p^Rp-3MguO?b4NvEZ2dp{wPq_IxRs>Bl~ievYj z)WQmdkR>Uj8pQ%zLPrK{p76YanacW_?x zmThTnssdlD+e=?Ce^U3F7!zGH`beihPcXkSjFTxSLj?}2kM!D;aVSRtf|I!@F*FR> zU;?@Ull)!e(t3zbwd@&RM_v~o5|GSN+rVP|mBAF~qiiwjQ zDH{iiiLO`9h~kq!DI|Y|x0@kICv;l6Q#^}}xDF6biH@NbJ@lb%-IUI%^r4*=k>1wG zYYR<)4|IVM$o4*J$3*CVuhmXS{b7bh{gvjg%tcsrd(UBi>CAwUYyEHF~z!gISXHDsc#{u52!+#3@W| zILa*RugAxznD~D=V|ypl<7#{MZp3eCmS&XQa_ND&faY~dpEXX+@7!ZMpfiF-3WL_O%mh#q9Wh1 z0phl_){PAi_r=;!_ImM-$J&_g!UD1V2JeO4W%>Qt^6P)qX)f_0D!wYgtcBi|ts9Q{ z_7?Q^xq|REc2;9QbW4kqap30u+bu7-O-tD}>JU9v+6cfMkp;CQd$YjL^i~%5{Ol4U?#8=Rf1uhK$m0pyIs;9 zyU@I3SMyOwF~x z`o1HRwDtY}(`GzQSSHZf>1)yIq@3wHMLQ${d|=9P_V-q2B0?6y!A_9vp53#19>DYe Q0{{U3|F$J&GXQJ>0OKa19RL6T delta 10064 zcmV-WC$HGiS+H4oq{%_+6Ga*^>Gaf)Jdg$|)7D@03dM$(y8ejpJkg^`)Fd{Kq;~iw0#87~ynjTElA&iUO2#MxKM3MQrJbe}YdEIK}Zsvz5aOkY!XVOhOJ=LJvuv0op@<9Rt;W?;~3lVN+P3YZAw30Jch`)qp9>I;am4 zNrr|v7J$f5y+qfT>X(@S^_wGhO*^W+q6v!7Vnfuo7+7=_IH!5W z74WEKe`ddgrl)WXI4wTFVSPvxbgkYfou*|7qvyWtgo2d(F;Va@fG0#KCL?;N+iDE~ z%Z%&Q0Td5n__6;JXIYw0k!{C(JEJk7@Seq)YCsQZ3!#*=6pyfkKQkfUs7Bsu)lB3? zT36WsVvwhV_t3!v^MjZS4(!WT%Ng|o`PtELe`%78Nr*)c9kvis)GuK)eK$>^hc3a4 zj4GDVxAYAbiku51^~)0j?IOn1!QaCs#(-lvzF=JT(9yp?e|DsbvC+>kfw+gBwGg^y z{EE<#?yl*VOwtxY5f%B+oy3{K;YY%S{40@TH9Y4a5!yp|f=R4K6dCQNhfZOLvsmso zf7PmfPz{+1Z|SKTMaUbC^e=xK=G#8vAhDKpcsL}K$f=gHhE)3yLns-yuToAJCvtic zVN$&{b5&^OijO3ElG>Ix zuvFDnO}AfvB0`G%0}O`{${uQ;vwk>+e<+Kgy%c;)J*k@S8*e4pQZpxZKwm`>qv9=% zr|ZJxAXvsju(RP;QDTx1>8MQ!B%0?Rce`&$E0+cT$UwNI!Zhol!)`KD?I^D`tB2fR zOCAZ<)Y{R8t$CG-rp698Y|K$;Z=ydfEu3bUu6lc$tSrHwexU^%!`-Xgb_o{!fAm)P znRf}+*4gb+NV9TzheY{w6QXQTON|N=m2%qs0)Yj4k37%s9n?i+-9=)R^ zA_A)i2KsXkwbjhGe|60ibDV$#UP1z{wg|dG^LNKq?}$m*$>%I)YF*eWW6Yt44)UMb zKxw=7*X)j>-EG@%YU^P!&$o?^eZvkTA_6fQPZ0%(?5<6hiqz~U&R#;%l+knzsjkvW zU}sUo3zz}85}q1@NO7pZ*da3jxSAJ|-uY@GkcK?I(x9?u}JMxpFa?7z41 zpm$@adv%CFBal*Yg$UA^O(9Z3LmO{OQS*+Wa17y9y>`kXfrP{|6ZikSB%e?_D1iZu^xp=x zSUa$^N;8HyDfbb`iGfSJFQ%Gk_XdZ_K=F5Wr`rg#KVFqqbA<;LfxidJ#@{2Aq| z&>h51e`CGE!LC~~WBaP`FYwi2L;{Xpm_i!rZPYat{;mO>8|JAtT$ zkex9NB|tceG!5YRf)gr%pC}lm*|-w0e|APA5-NtKs9b3)h0%`)WXx!eJxnsCIY`C< zVT)SF+7kaR7`?!9+(R9+x#{TI@7OOQk5@3$bXk8bwa;|GSPYnYaU3FyC|sAgQGiHP zz0>{H!r25@V96iK_I!uM1ziKdE$INKWXevG)aP72Bqm(`o&;E|tSokKgFZ z27iZ8Ds9GuKd7CpTfJP9APQoC#WJdwEC$>bRSb#RwM*1yiFMG0F@jJg0m(6zil338 zVoOTPW*HG~J6fFLdA)q4TWki*(k2#=}5wj4m zM1aFFVsZ?;gRBh|z4@j8PO%?@D@4Z2V*+{bsK$1Pu>EhQv;oU#x{m>&fh4ZGN3lPNuYl%cn9&G$Jarj~6_(bK)!Z#tXjeLMGW)^wAToh73V#P& zuFrI4w15iKSEB}CRz)~8;*(Ab8GmFVe^e}6y}JgY$i(U@ih8PpT);-dg9z$F34xv3SmT$Oa**828Hb>D7kjTykOSF2Y*WJk;}1FaZX zHms+j0vPH3(45|NNEvXUbe$}Yl&G2jSF$E#BT9ZNU~8738nt2dRhU|jp?^3we*JyD zq!TjG)*vi9O#QqI@o`*3+quhMzC!0ntQMe}7vW7E5VraFm=A zN_uGZzZ4hsXjjgX&J0k5-f5yE5NkpwNs>t&s)L8J;Fyed%6`niXzq&s+N6H_3fFqs zSl8)zO}X|0Md-o@sZqnW3TwF&X@Kesw`HVm7=#{KwWCoCM2IXgs_#G%-5gYf>P+Ei zLRfh8w}Ov5vu7}90Dn3FZ7HwsCL;zyX?VrPMR9P?HqJ*lsF`^D#Tytv{xoh=mLQbI zx($Sa8~Rfb=F9KOFrD4g`8rqX2eT8`G(~o6*#Otfo1V5JNJ5FLsw$uet~~JOHr@bs z!^t!s%}C9BWE9>GXXi91_J=+6q20Lh+rKWT*+>dAH5)c)3x7E8BhMC5QyQ7w=zEHK z26NH=(g#Mjs5FOxkB!7Il!%g8En;F#NoEgc1gLRnRd=~16=uS};9sE;nLrV@rJEn) z37{m4B}wBFvO&1ofL}T=TGmQ|Yp=ZV$ajp1rN;LPhGo{ZZ&~1KyY-MZW9KNvquQbx z#%#jEd`M;zU4Q4JhlOAv(IT}(77@!k-SJ&+_8oZFM2^igIgoQi^{l8d(NS@7tdx1W zEQy(zJGB$Sb`qTywANk$s%LcoKv9DE)r<~h(9Zk0Z{rjD70qLaNvt7{fPyykC?=^C z#SVI%q|!HYR>vl0hH)ITYa8$-3x-uwqtHB7RIr80+ke0+PafrThGUuS@*MTl6max< zqpfG0D_NnGOP&-46YSX^n&*U3r5~u>KqjoEWm@br2OzK2WGrhy@$Nl@8ds5pAqX+d zV)S@0Rl6AyVXO9Fxtf`#){5DyRLn9@&;W*turgtqm@&B6s*MWdeDlj9PCdW&5)9kh z(Q-x69CeihAYT00whV3u5sK(vpDELgWFdAGlfG1g1Q15_{Ka@OOi8B$}qn5*DS zL3Ysj+jp;hZ2KKUc*018QYHjZ+XVq(#)+IFB18saABFQs+KcIGMD8bR58!PRI$D|7 zS72FHf7${9cZ=rKEEm`leQejUo;4U4>xM;iMt@N>r8prW5_OyMY+q1_1?)RqypU=` z62}lJ{nWNuAmceJT0T}%0&3??d{mul7xo#MacVccTGX|xGOF!?Il86erhg2}Fv77;Oj>(WZu9K+^aoqA$68mXnM zgcT{QPSnmBCKL&vf=Ds}SNrscAhg&bBfTPMX29fp@nfd-8Vh&W{6>YvykjBOb4(9q zGn3DJ&yA9TB9_{V3VTOn^_SEGs+bOUgM4#ykz6 z0ZoIHmvb$DAvzZdN}oiK`$nO=CJj1^FzF)N?|24nkDT=aMG0UV3ZgnlD2TetVxCl; zjmB|@qKJB!CG5G2rAGAynEHNpK|qI}?u|ey$UdJaH^5`=O7Q8Eo2ZeR#JoBWptkDS z$H7#BSYC&8)`17?dOBpW4m=PSBDruC_!Xcg1ybjKQZZCveCCZ4=_7eP3zl9SpNbC9 zIDe~yG(>{+#Av&dSsC^Cof@h{uM$V4Emo>i-|*4G3YD)=A7fgy-PRqLw=PpGC2-n9 z|M&5K{_*$V$$vb4{Gl8C`>%g|{GT2D$M;YE%K_Q;>?auOwQWN0zE{n##%=2 zcHrB6qWdNr)Q(3NW;Ju(eis_)j}rVQLn6QVP{>^f(WX8ITvqgZhfoiTVUd8B#_q1d0@A2}|z2hhANrxv^hnx^qArLLd_* z_O3Cf+OKBD-eh%9pi@SL6^A8oN0V_A7Jt12^1iuvR+}S?{?)+gp?1TOkAob{Y^-OA z_5aq1`kEosDx2-^-36R}MPa7f2`t@(k~W8uZYg+l7cRO?xacheh~BS|(6223bkk7J z4TCy24By;1Q1ju2WNsn&a`Q0DjRPugFm&=x;uSZIPTWQ;;^vWu8^;-L8dbQ(7=OYW zh#1^7K5+ABz;7w`Z_CksHx=La6-V@K9>2GRXuYk(=4~8__fX00KE>2+D}ruI@p79- z$88=9x0T4ZEycNg0iDBD3Vr}#Iv@JxVZ6o&Ven*;Z5>vK|9=p%cV_S$7+e&2E z-AIYWC~P1kHjU`|%Hy}T5v{c~T7TRy5^Hlx+&Ic=OEFcOMo?`UFSUz~+E#Q_ej9}o z9_756A0Jg(A#fN%Dj_jZ%nGMSbnWprHy2OGUhZb8yd!9^(VbMzQ3+AUk%xl;ji1y~5l@lO3v40nab5`Ok zPTg0FB2G?00#CFHFyFN_Syb|Ei5zp5jjExyK1*q7nl@LZ+1p5n6xMpi{?~|wB_cs}r9k0UKQ{FXVBnb9cM_lu(wv#B$SePMpVku_aJg@S0!UYH7 zm9!GZmtigY+UhKYF&Yv&>wgN!eRUqd;DW{+5M{KyBOtm5(HS*4xJv@&(WR@aaL!y* z3#y&^l3d1Tj;!*WwRlYpY%}LUeWQaGGoXpJeW@>bZ0i|on`>#>btSGSl<$AMrfv70 zD1}}+o(dA;xan{(qs^vKjoTHZvQr?nRO7WK8c|u?c#UD_k3RqcXn&T}olN$MpX$rY z{7TKm1X*0u+C+%OjVCifA}&vF$i$k6ie|xGJP$a z6LGQLcFn7A=?|`UxqpRoF3X;5xi>oRx2o&zqO)%%I@=J?CL!7y!nWeH*V&6~a|g2Z zeaHRWZR}#f^D({Y9mQ?%@KtsV+uA4G$j)FJdx5V)`@h%v{_dE=1JUUpycWN_KW68F zc^DoT!{=|o1>=~S8l5nv%py08MY-7zQ~tHU{Zinxp#$c@rA}F>owW~Hk}AntahjKC zQ>2~xbI@AtM7#LP zL)?#y=V8b?^^)4C62tR7a0{EnZ16A6BulWgV0@9vC;hWIASG}le@Fx&cH@_;T5;Pp zXclSIeDhPtxbgW!p40EfPNzEVjcXSBI$?#6ymYW|eumi{fQmn36{^aGWOF)*S(_+o zvWuc7+bEhJ`tGxlqUG(Rb2lEIKCjM5>}f2Uqss%bNELw{^a^iXNq^`kkQZ?_B2+1r zkDr(b^PxB8v|f&pe?8USJU?^Bb?rnW`N^<~ncy+w<<9hp2jPZgj2NFuAEqm0e6f0hTD9%gWbRo%4Qd4e~xi!+?)+=x``2O^+LVP z?_jG^=8_k$H54{H!^oI7ELy~3`nBRY6HnCN)#EVNW9Ebvc*ZF|ldZLXH6u1R+rR$# z-#?NV%qsZTKmSK@oqzrFzki5Xc=fM;{?F2hy{i!;mN^>a9tnf7b4I2*!#;?`oY#l} zQ-tGmjBPHAV^!GtdYNMuWrk_WO6%!VW1d=cUgX#`9JmkzgpT%`n)b9{Pq^kfx;{;u z`^dF&7Lnl)bY>0#I_;iO$&F;eK9C{{$NTOf*@2SK8b}B_;erfiPZzI0FPGq1l5=t@ zUBa-&lMfmge@2GeQ7q!3ynr6r=oovV+_x(u5#bOTuZEj2aR4S8h4(z*YO3zOK|&|o zTF(C1to3Q?j%;EZ2i-AFQ&?U*@jzZzUuiP741|64rITPvh9G3ewgFsxIQq3o9ZI#w)NnxoI7^heBL@5GFIe|D1^1c5xo~lvE zC(fpY#azy%)*@Bl+tar_gP9_z5zTXD4T<7?eH2o0mhBO@L1bTpwIBensdgP^1~yluHL% z{v7P-f7b4c7GTSEs3PrdvRA4daj;gWa@WH0a_mt*4`r&=t!YLDk8M~?M4$vmP^RFy ze_>Kq1FF-@h10;s^#qtk>Ti?sG@PzAf*DzA`TlZtdOHN3k+s%p`TzYg_} z|0e$J{J-qbRo9=vnO0gAM5*J4|Nf#IbPt2>p$B5O+tdF;zq~tX&N8QQZD4P1*jf49 z*~O`DE;YMN)v4JYT3)pV3BS9+^Q+3ihVS?Noi(B45kb2?MbSQ%I){D**C-FLMbi3W| z^W$UvZ@1g6{d@TQ*^BOXhsQ6Do*f;%cz*oiyY5l<+0$p=q3-s(JNslpV*XusgEFMln&NpFg9{dlUZV5Q(-^fBDjK4S##O=q1E} z1$0Ui-j^?}&z}*YVVp&P+H@#7F&;oH+Ngtm*QRSK(UB^bhgxw+V-jM~)O!BiU?3od zQ0CjI1j}&zvu+??*EmfV_d`gIC5&v)lwm6VI(f-=)6~|@*OSGd7{ev{{oFuU0nuti zn&Kv8Skxd19>GNx$9)JnNPkg6uYb|lN%l9K#Lcw}H2+ir%K2CEV$6g*2YJo-l?m8I zXwSJu2jN&SL;)i0C`r_I2GOB#f>VHUvdn@@~20ZbWo#`} zCNGcLGcN-*5jcvJM*Q**k6)dhUcT=4pLhz!fFt06rhmfd;(rq5m8LJ71h5APe3Bdo zhW`e+#CoZ?x2NzBu*^6FBc(IG{4=ABU%bDBFvcV?+_8tAh9l^q@`s6FYh-wqOli^gE)K1son#5pLvG$Xf5-(s+8wm@ISmI;U## zC&VcpkeGO5$~jBx?*jDd=bydIhJ)HwFUx2yP3f&O882M#V$Vyi&s;WaYdNN}Ec@^> zpW9$5j{J}fHcf|O znT1J*V!O+62H@F0usIa z!{hU}r>{Sro%*zkg6sU@@k#&en7_&I)p=XuvN~rw=vfc+R*ia$kYF|?$8H`Z-t^Sd5*<|@$RwxomB*F11#CX~_ z;ekE$wCd`&lDhbOSpA#=CoJ+;UVkhZQx=Jmf}5qI)6J`Fps3D}@__>2t;Si3N0uqI ze{hd&)ye-hOCXRu8&41f6?gwkG9nutaMC}sd4JC41_D$? zdEvIlQsQuYS=@1#N86b7`!g9rI1OWcL0yqD@Is*^?1fS_Kcsa#bb#VP3}-YZ)ZTGt zSwnzcr(;Nfh3j7_2Wzi<^DKz} zdHVdgw*C)a9KAT&t^eD2oRdB!9t#3J!JmGic!Ei+7L#WslYegUR#(TW3)-4fin-KY z=oHKG%Rf9my*zvW`tsxD>z_XM-=6&CZ=q~9?C6wr#b(F+Z0d$- z^)J8t@cN@R$DY4>^ZM2dvP<{`JQIDZT&b*FndbQ*+@kApI8V>-HbjOF#aH5#+PN8< zSR`8HV>1fKw}0VX+xe|-+i$g!dV9kjtIhn?H!O?p-dWaQaZYW0_%jnycmHi#+wxX> zqG(2GDW)?aqxHMa-QfTk9^_>^Gi94W2K8(9<^t_RGd-PQmaB>K)m?pF>R8Xs=hFt~ z`TgE&-MT0Vcr`a0$+N64#*R!Y)o>Dt~;h$LyOQ@)BKM=EDAiWy6Frd~I@ z3L0kA3V&K6r=8XwI&<@C6DlOunNP4N(v#{m#8`lvhCEVyiwrW8Es7#c5l$6*;zX_3 zJtwuWLLp>H%BV)Mz?RUF0h=d0uVAJ#wpesj$!j9Vtv&P}QxeB+M)ZAcY7Z=s1Yd#B znWxGW$^|N&)^<+p`zHEkJb1|Cz?#?kj7z{**flg}(NHZ~wW4VHc#)&Q2UXuc&yU3;W5TC~VA0OZ_u$GV;jsNQ&KRrI0iT``H+yC9lQ&R@&DUnPTCbfu@ zA1NCL!bI0AXGE=&K`A7EnYWuENGEh!x>G!h4Z98yPKl187CrQ#ZQYcPRQk|Pi%4&4 zguR%MswnE)($XZ|ipkfZ^4D(L=U;3G^|8K_u zw8;PS;>FXt|L4Vj@$UT3tvoCHe=dJ`bz)pUxo^T_QSP+%cFvw{IeRwV#oV5+$1ftc zBpc^+Bj6b|Nlfp{?&OX)Aj|8Y8!DcgZb0tKZlmn=;(dqRW8TFMWcv-?i+xv9cW2vN zUS6H%93P_Mt76QW>1}y;AG_bJNOz1-^OD`nM=vkH*zhTjwS(quhxKl|je%t+B?-*_9*)0Y;@1B{b#{WBGh!ZlRjKlWYSeXCo z=y{F*A0ItC-tqt2c=pf*R%!*+w=S8PH@D3WG7>9)PJmJzUf~glP9FVT-1{iT5XWc~ zvw?|DC3LipIK)`rn44lbcHUzewe}DNb7TrVPIVAkenI8`deT8}X*@-Y>Y55AlmbUF zq0nh{PWvB~aDmnyI$=q|D0+X=M-kzo)fo|ap#N*oZ*>O0@dN$e{Ka^5p#GEp6cc(- z0vg~`@G48SO;fbK?}+QP^?hf6uUg-CWRkYN|9{$y#|g^>Iy-$WTAh?LeWzfDM1T)W mInMsx>P$q)A~@JFvfZV diff --git a/charts/latest/csi-driver-nfs/templates/rbac-csi-nfs.yaml b/charts/latest/csi-driver-nfs/templates/rbac-csi-nfs.yaml index 0fc047cf..9bff94bb 100644 --- a/charts/latest/csi-driver-nfs/templates/rbac-csi-nfs.yaml +++ b/charts/latest/csi-driver-nfs/templates/rbac-csi-nfs.yaml @@ -57,6 +57,42 @@ rules: resources: ["secrets"] verbs: ["get"] --- +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: {{ .Values.rbac.name }}-external-resizer-role +{{ include "nfs.labels" . | indent 2 }} +rules: + - apiGroups: [""] + resources: ["persistentvolumes"] + verbs: ["get", "list", "watch", "update", "patch"] + - apiGroups: [""] + resources: ["persistentvolumeclaims"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["persistentvolumeclaims/status"] + verbs: ["update", "patch"] + - apiGroups: [""] + resources: ["events"] + verbs: ["list", "watch", "create", "update", "patch"] + - apiGroups: ["coordination.k8s.io"] + resources: ["leases"] + verbs: ["get", "list", "watch", "create", "update", "patch"] +--- +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: {{ .Values.rbac.name }}-csi-resizer-role +{{ include "nfs.labels" . | indent 2 }} +subjects: + - kind: ServiceAccount + name: {{ .Values.serviceAccount.controller }} + namespace: {{ .Release.Namespace }} +roleRef: + kind: ClusterRole + name: {{ .Values.rbac.name }}-external-resizer-role + apiGroup: rbac.authorization.k8s.io +--- kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: diff --git a/deploy/rbac-csi-nfs.yaml b/deploy/rbac-csi-nfs.yaml index 6d21b7b2..21e36eff 100644 --- a/deploy/rbac-csi-nfs.yaml +++ b/deploy/rbac-csi-nfs.yaml @@ -64,3 +64,39 @@ roleRef: kind: ClusterRole name: nfs-external-provisioner-role apiGroup: rbac.authorization.k8s.io +--- + +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: nfs-external-resizer-role +rules: + - apiGroups: [""] + resources: ["persistentvolumes"] + verbs: ["get", "list", "watch", "update", "patch"] + - apiGroups: [""] + resources: ["persistentvolumeclaims"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["persistentvolumeclaims/status"] + verbs: ["update", "patch"] + - apiGroups: [""] + resources: ["events"] + verbs: ["list", "watch", "create", "update", "patch"] + - apiGroups: ["coordination.k8s.io"] + resources: ["leases"] + verbs: ["get", "list", "watch", "create", "update", "patch"] +--- + +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: nfs-csi-resizer-role +subjects: + - kind: ServiceAccount + name: csi-nfs-controller-sa + namespace: kube-system +roleRef: + kind: ClusterRole + name: nfs-external-resizer-role + apiGroup: rbac.authorization.k8s.io