Allow volume controller to list+watch StorageClass instances.

openshift · Aug 2, 2016 · 5f9c005 · 5f9c005
1 parent e70997f
commit 5f9c005
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/pkg/cmd/server/bootstrappolicy/infra_sa_policy.go b/pkg/cmd/server/bootstrappolicy/infra_sa_policy.go
@@ -506,6 +506,12 @@ func init() {
  Verbs: sets.NewString("create", "update", "patch"),
  Resources: sets.NewString("events"),
  },
+ // PersistentVolumeController.syncClaim() -> provisionClaim()
+ {
+ APIGroups: []string{extensions.GroupName},
+ Verbs: sets.NewString("list", "watch"),
+ Resources: sets.NewString("storageclasses"),
+ },
  },
  },
  )

diff --git a/test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml b/test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml
@@ -2660,6 +2660,14 @@ items:
  - create
  - patch
  - update
+ - apiGroups:
+ - extensions
+ attributeRestrictions: null
+ resources:
+ - storageclasses
+ verbs:
+ - list
+ - watch
 - apiVersion: v1
  kind: ClusterRole
  metadata: