Skip to content

Commit 3eb8338

Browse files
authored
add permissions so that dynamic rp can deploy persistant volumes using tf recipes (#10234)
# Description When using terraform recipes, dynamic rp creates the resources specified by communicating with kubernetes. It has to be updated with permissions to deploy a pv for extensibility. ## Type of change - This pull request adds or changes features of Radius and has an approved issue (issue link required). Partially Fixes: #[9829](#9829) ## Contributor checklist Please verify that the PR meets the following requirements, where applicable: <!-- This checklist uses "TaskRadio" comments to make certain options mutually exclusive. See: https://github.com/mheap/require-checklist-action?tab=readme-ov-file#radio-groups For details on how this works and why it's required. --> - An overview of proposed schema changes is included in a linked GitHub issue. - [ ] Yes <!-- TaskRadio schema --> - [X] Not applicable <!-- TaskRadio schema --> - A design document PR is created in the [design-notes repository](https://github.com/radius-project/design-notes/), if new APIs are being introduced. - [ ] Yes <!-- TaskRadio design-pr --> - [X] Not applicable <!-- TaskRadio design-pr --> - The design document has been reviewed and approved by Radius maintainers/approvers. - [ ] Yes <!-- TaskRadio design-review --> - [X] Not applicable <!-- TaskRadio design-review --> - A PR for the [samples repository](https://github.com/radius-project/samples) is created, if existing samples are affected by the changes in this PR. - [ ] Yes <!-- TaskRadio samples-pr --> - [X] Not applicable <!-- TaskRadio samples-pr --> - A PR for the [documentation repository](https://github.com/radius-project/docs) is created, if the changes in this PR affect the documentation or any user facing updates are made. - [ ] Yes <!-- TaskRadio docs-pr --> - [X] Not applicable <!-- TaskRadio docs-pr --> - A PR for the [recipes repository](https://github.com/radius-project/recipes) is created, if existing recipes are affected by the changes in this PR. - [ ] Yes <!-- TaskRadio recipes-pr --> - [X] Not applicable <!-- TaskRadio recipes-pr --> Signed-off-by: nithyatsu <[email protected]>
1 parent aec9c67 commit 3eb8338

File tree

1 file changed

+13
-1
lines changed

1 file changed

+13
-1
lines changed

deploy/Chart/templates/dynamic-rp/rbac.yaml

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,18 @@ rules:
1515
- namespaces
1616
- serviceaccounts
1717
- pods
18+
- persistentvolumes
19+
- persistentvolumes/status
20+
- persistentvolumeclaims
21+
- persistentvolumeclaims/status
22+
verbs:
23+
- create
24+
- delete
25+
- get
26+
- list
27+
- patch
28+
- update
29+
- watch
1830
verbs:
1931
- create
2032
- delete
@@ -86,4 +98,4 @@ roleRef:
8698
subjects:
8799
- kind: ServiceAccount
88100
name: dynamic-rp
89-
namespace: {{ .Release.Namespace }}
101+
namespace: {{ .Release.Namespace }}

0 commit comments

Comments
 (0)