Add coordination access to controller cluster role

2026-05-01 14:22:22 -04:00
parent cd806b7678
commit f0fcfe6b4e
3 changed files with 20 additions and 7 deletions
--- a/pkg/truenas/rbac.go
+++ b/pkg/truenas/rbac.go
@@ -25,6 +25,7 @@ func controllerClusterRole() rbac.ClusterRole {
 		kube.PolicyRule(kube.APIGroupSnapshot, kube.ResourceVolumeSnapshotContents, kube.VerbsAll()),
 		kube.PolicyRule(kube.APIGroupSnapshot, kube.ResourceVolumeSnapshotContentsStatus, kube.VerbsMutate()),
 		kube.PolicyRule(kube.APIGroupSnapshot, kube.ResourceVolumeSnapshotClases, kube.VerbsRead()),
+		kube.PolicyRule(kube.APIGroupCoordination, kube.ResourceLeases, kube.VerbsAll()),
 	}
 	return kube.ClusterRole(root.TrueNAS_CSI+"-controller-role", rules)
 }