From 9dad642c84bde9e01298e9c18c55d28c50f41b67 Mon Sep 17 00:00:00 2001
From: Walter Wahlstedt <ww229g@att.com>
Date: Mon, 13 Jun 2022 14:53:04 -0400
Subject: [PATCH] Add pods watch and list permissions

Change-Id: I050bc8df976032b094154a4c6612dd80eb4d54f8
---
 ceph-provisioners/Chart.yaml                                   | 2 +-
 .../templates/deployment-csi-rbd-provisioner.yaml              | 3 +++
 releasenotes/notes/ceph-provisioners.yaml                      | 1 +
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/ceph-provisioners/Chart.yaml b/ceph-provisioners/Chart.yaml
index 26acd1e66..ce1317549 100644
--- a/ceph-provisioners/Chart.yaml
+++ b/ceph-provisioners/Chart.yaml
@@ -15,6 +15,6 @@ apiVersion: v1
 appVersion: v1.0.0
 description: OpenStack-Helm Ceph Provisioner
 name: ceph-provisioners
-version: 0.1.18
+version: 0.1.19
 home: https://github.com/ceph/ceph
 ...
diff --git a/ceph-provisioners/templates/deployment-csi-rbd-provisioner.yaml b/ceph-provisioners/templates/deployment-csi-rbd-provisioner.yaml
index fa39c410a..b5bff8ca8 100644
--- a/ceph-provisioners/templates/deployment-csi-rbd-provisioner.yaml
+++ b/ceph-provisioners/templates/deployment-csi-rbd-provisioner.yaml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: [""]
     resources: ["nodes"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["list", "watch"]
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list"]
diff --git a/releasenotes/notes/ceph-provisioners.yaml b/releasenotes/notes/ceph-provisioners.yaml
index 0c860b0e6..d1c884d7a 100644
--- a/releasenotes/notes/ceph-provisioners.yaml
+++ b/releasenotes/notes/ceph-provisioners.yaml
@@ -18,4 +18,5 @@ ceph-provisioners:
   - 0.1.16 Update htk requirements
   - 0.1.17 Consolidate mon_endpoints discovery
   - 0.1.18 Update CSI images & fix ceph csi provisioner RBAC
+  - 0.1.19 Add pods watch and list permissions to cluster role
 ...