Fix apigroups for volumesnapshots psa RBAC (#4547)

Signed-off-by: Deepak Kinni <[email protected]>
vmware-tanzu · Apr 6, 2023 · 4b16cc4 · 4b16cc4
1 parent 7cf3455
commit 4b16cc4
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/addons/controllers/csi/vspherecsiconfig_controller.go b/addons/controllers/csi/vspherecsiconfig_controller.go
@@ -76,7 +76,7 @@ var providerServiceAccountRBACRules = []rbacv1.PolicyRule{
 		Verbs:     []string{"list"},
 	},
 	{
-		APIGroups: []string{""},
+		APIGroups: []string{"snapshot.storage.k8s.io"},
 		Resources: []string{"volumesnapshots"},
 		Verbs:     []string{"create", "delete", "get", "list", "patch"},
 	},

diff --git a/packages/addons-manager/bundle/config/upstream/addons-manager.yaml b/packages/addons-manager/bundle/config/upstream/addons-manager.yaml
@@ -208,6 +208,16 @@ rules:
   - get
   - update
   - patch
+- apiGroups:
+  - "snapshot.storage.k8s.io"
+  resources:
+  - volumesnapshots
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
 - apiGroups:
   - ""
   resources: