This is an automated email from the ASF dual-hosted git repository.
ccondit pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/yunikorn-release.git
commit aa92dffa020844da36925b044683fa4361d76926
Author: Craig Condit <ccon...@apache.org>
AuthorDate: Mon Mar 3 09:58:35 2025 -0600
[YUNIKORN-3032] Add explicit permission for
storage.k8s.io/volumeattachments (#189)
---
helm-charts/yunikorn/templates/rbac.yaml | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/helm-charts/yunikorn/templates/rbac.yaml
b/helm-charts/yunikorn/templates/rbac.yaml
index dc1d987..fb24bec 100644
--- a/helm-charts/yunikorn/templates/rbac.yaml
+++ b/helm-charts/yunikorn/templates/rbac.yaml
@@ -42,6 +42,11 @@ rules:
- apiGroups: ["scheduling.k8s.io"]
resources: ["priorityclasses"]
verbs: ["get", "watch", "list"]
+ # Ensure permissions for volumeattachments as this was only added to the
kube-scheduler role in v1.32.
+ # This is required here as long as we support executing on prior releases of
Kubernetes.
+ - apiGroups: ["storage.k8s.io"]
+ resources: ["volumeattachments"]
+ verbs: ["get", "watch", "list"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "watch", "list", "create", "patch", "update", "delete"]
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@yunikorn.apache.org
For additional commands, e-mail: issues-h...@yunikorn.apache.org
