openstack/openstack-helm-infra
Code Issues Proposed changes

Fix ceph-provisioner rbd-healer error

Browse Source 
This patchset fixes the following error which was recently introduced
by changing the cephcsi image version to v3.4.0:

E0816 18:37:30.966684   62307 rbd_healer.go:131] list volumeAttachments failed, err: volumeattachments.storage.k8s.io is forbidden: User "system:serviceaccount:ceph:clcp-ucp-ceph-provisioners-ceph-rbd-csi-nodeplugin" cannot list resource "volumeattachments" in API group "storage.k8s.io" at the cluster scope
E0816 18:37:30.966758   62307 driver.go:208] healer had failures, err volumeattachments.storage.k8s.io is forbidden: User "system:serviceaccount:ceph:clcp-ucp-ceph-provisioners-ceph-rbd-csi-nodeplugin" cannot list resource "volumeattachments" in API group "storage.k8s.io" at the cluster scope

Change-Id: Ia7cc61cf1df6690f25408b7aa8797e51d1c516ff
This commit is contained in:
Parsons, Cliff (cp769u) 2021-08-17 03:39:27 +00:00
parent 3a76480c00
commit fa174c00db
3 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ceph-provisioners/Chart.yaml
View File

@ -15,6 +15,6 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Ceph Provisioner description: OpenStack-Helm Ceph Provisioner
name: ceph-provisioners name: ceph-provisioners
version: 0.1.12 version: 0.1.13
home: https://github.com/ceph/ceph home: https://github.com/ceph/ceph
... ...

5
ceph-provisioners/templates/daemonset-csi-rbd-plugin.yaml
View File

@ -25,7 +25,10 @@ metadata:
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["nodes"] resources: ["nodes"]
verbs: ["get"] verbs: ["get", "watch", "list"]
- apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments"]
verbs: ["get", "watch", "list"]
--- ---
kind: ClusterRoleBinding kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1

1
releasenotes/notes/ceph-provisioners.yaml
View File

@ -12,4 +12,5 @@ ceph-provisioners:
- 0.1.10 Add check for empty ceph endpoint - 0.1.10 Add check for empty ceph endpoint
- 0.1.11 Limit Ceph Provisioner Container Security Contexts - 0.1.11 Limit Ceph Provisioner Container Security Contexts
- 0.1.12 Add ceph mon v2 port for ceph csi provisioner - 0.1.12 Add ceph mon v2 port for ceph csi provisioner
- 0.1.13 Fix ceph-provisioner rbd-healer error
... ...