charts: update NDM rbac for new validation of webhook

Signed-off-by: Vicente Cheng <vicente.cheng@suse.com>
harvester · Oct 17, 2024 · 6e91faa · 6e91faa
1 parent d86707d
commit 6e91faa
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/charts/harvester-node-disk-manager/templates/rbac.yaml b/charts/harvester-node-disk-manager/templates/rbac.yaml
@@ -50,6 +50,12 @@ rules:
   - apiGroups: [ "" ]
     resources: [ "secrets", "configmaps" ]
     verbs: [ "*" ]
+  - apiGroups: [ "" ]
+    resources: [ "persistentvolumes" ]
+    verbs: [ "get", "watch", "list" ]
+  - apiGroups: [ "storage.k8s.io" ]
+    resources: [ "storageclasses" ]
+    verbs: [ "get", "watch", "list" ]
   - apiGroups: [ "harvesterhci.io" ]
     resources: [ "blockdevices" ]
     verbs: [ "*" ]