This is an automated email from the ASF dual-hosted git repository.
ccondit pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/yunikorn-release.git
The following commit(s) were added to refs/heads/master by this push:
new 1d4d39a [YUNIKORN-3032] Add explicit permission for
storage.k8s.io/volumeattachments [ADDENDUM]
1d4d39a is described below
commit 1d4d39a944ea8414a494719fa721caf7d26f11d4
Author: Craig Condit <[email protected]>
AuthorDate: Mon Mar 3 10:11:25 2025 -0600
[YUNIKORN-3032] Add explicit permission for
storage.k8s.io/volumeattachments [ADDENDUM]
---
helm-charts/yunikorn/templates/rbac.yaml | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/helm-charts/yunikorn/templates/rbac.yaml
b/helm-charts/yunikorn/templates/rbac.yaml
index c461358..8907c69 100644
--- a/helm-charts/yunikorn/templates/rbac.yaml
+++ b/helm-charts/yunikorn/templates/rbac.yaml
@@ -25,6 +25,9 @@ metadata:
"helm.sh/hook-weight": "0"
---
+# Explicit permission for volumeattachments as this was only added to the
+# kube-scheduler role in v1.32. This is required here as long as we support
+# executing on prior releases of Kubernetes.
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
@@ -42,8 +45,6 @@ rules:
- apiGroups: ["scheduling.k8s.io"]
resources: ["priorityclasses"]
verbs: ["get", "watch", "list"]
- # Ensure permissions for volumeattachments as this was only added to the
kube-scheduler role in v1.32.
- # This is required here as long as we support executing on prior releases of
Kubernetes.
- apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments"]
verbs: ["get", "watch", "list"]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
