Skip to content

Commit fe5d306

Browse files
Update CAPI, CCM and golang versions (#355)
* Update CAPI, CCM and golang versions
1 parent f16f6a2 commit fe5d306

File tree

7 files changed

+259
-197
lines changed

7 files changed

+259
-197
lines changed

Dockerfile

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Build the manager binary
2-
FROM golang:1.20.6 as builder
2+
FROM golang:1.21.8 as builder
33

44
WORKDIR /workspace
55
# Copy the Go Modules manifests

go.mod

+8-8
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,9 @@ require (
1919
k8s.io/component-base v0.28.4
2020
k8s.io/klog/v2 v2.100.1
2121
k8s.io/utils v0.0.0-20230406110748-d93618cff8a2
22-
sigs.k8s.io/cluster-api v1.6.0
23-
sigs.k8s.io/cluster-api/test v1.6.0
24-
sigs.k8s.io/controller-runtime v0.16.3
22+
sigs.k8s.io/cluster-api v1.6.3
23+
sigs.k8s.io/cluster-api/test v1.6.3
24+
sigs.k8s.io/controller-runtime v0.16.5
2525
sigs.k8s.io/kind v0.20.0
2626
)
2727

@@ -40,7 +40,7 @@ require (
4040
github.com/beorn7/perks v1.0.1 // indirect
4141
github.com/blang/semver/v4 v4.0.0 // indirect
4242
github.com/cespare/xxhash/v2 v2.2.0 // indirect
43-
github.com/cloudflare/circl v1.3.3 // indirect
43+
github.com/cloudflare/circl v1.3.7 // indirect
4444
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
4545
github.com/distribution/reference v0.5.0 // indirect
4646
github.com/docker/distribution v2.8.3+incompatible // indirect
@@ -107,21 +107,21 @@ require (
107107
github.com/valyala/fastjson v1.6.4 // indirect
108108
go.uber.org/multierr v1.11.0 // indirect
109109
go.uber.org/zap v1.25.0 // indirect
110-
golang.org/x/crypto v0.15.0 // indirect
110+
golang.org/x/crypto v0.17.0 // indirect
111111
golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect
112112
golang.org/x/net v0.18.0 // indirect
113113
golang.org/x/oauth2 v0.14.0 // indirect
114114
golang.org/x/sync v0.4.0 // indirect
115-
golang.org/x/sys v0.14.0 // indirect
116-
golang.org/x/term v0.14.0 // indirect
115+
golang.org/x/sys v0.15.0 // indirect
116+
golang.org/x/term v0.15.0 // indirect
117117
golang.org/x/text v0.14.0 // indirect
118118
golang.org/x/time v0.3.0 // indirect
119119
golang.org/x/tools v0.14.0 // indirect
120120
gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
121121
google.golang.org/appengine v1.6.7 // indirect
122122
google.golang.org/genproto/googleapis/api v0.0.0-20230913181813-007df8e322eb // indirect
123123
google.golang.org/genproto/googleapis/rpc v0.0.0-20230920204549-e6e6cdab5c13 // indirect
124-
google.golang.org/protobuf v1.31.0 // indirect
124+
google.golang.org/protobuf v1.33.0 // indirect
125125
gopkg.in/inf.v0 v0.9.1 // indirect
126126
gopkg.in/ini.v1 v1.67.0 // indirect
127127
gopkg.in/yaml.v3 v3.0.1 // indirect

go.sum

+14-14
Original file line numberDiff line numberDiff line change
@@ -76,8 +76,8 @@ github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5P
7676
github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
7777
github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
7878
github.com/cloudflare/circl v1.1.0/go.mod h1:prBCrKB9DV4poKZY1l9zBXg2QJY7mvgRvtMxxK7fi4I=
79-
github.com/cloudflare/circl v1.3.3 h1:fE/Qz0QdIGqeWfnwq0RE0R7MI51s0M2E4Ga9kq5AEMs=
80-
github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
79+
github.com/cloudflare/circl v1.3.7 h1:qlCDlTPz2n9fu58M0Nh1J/JzcFpfgkFHHX3O35r5vcU=
80+
github.com/cloudflare/circl v1.3.7/go.mod h1:sRTcRWXGLrKw6yIGJ+l7amYJFfAXbZG0kBSc8r4zxgA=
8181
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
8282
github.com/cncf/udpa/go v0.0.0-20200629203442-efcf912fb354/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
8383
github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
@@ -390,8 +390,8 @@ golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm
390390
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
391391
golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
392392
golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
393-
golang.org/x/crypto v0.15.0 h1:frVn1TEaCEaZcn3Tmd7Y2b5KKPaZ+I32Q2OA3kYp5TA=
394-
golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
393+
golang.org/x/crypto v0.17.0 h1:r8bRNjWL3GshPW3gkd+RpvzWrZAwPS49OmTGZ/uhM4k=
394+
golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
395395
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
396396
golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
397397
golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -540,13 +540,13 @@ golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBc
540540
golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
541541
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
542542
golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
543-
golang.org/x/sys v0.14.0 h1:Vz7Qs629MkJkGyHxUlRHizWJRG2j8fbQKjELVSNhy7Q=
544-
golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
543+
golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
544+
golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
545545
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
546546
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
547547
golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
548-
golang.org/x/term v0.14.0 h1:LGK9IlZ8T9jvdy6cTdfKUCltatMFOehAQo9SRC46UQ8=
549-
golang.org/x/term v0.14.0/go.mod h1:TySc+nGkYR6qt8km8wUhuFRTVSMIX3XPR58y2lC8vww=
548+
golang.org/x/term v0.15.0 h1:y/Oo/a/q3IXu26lQgl04j/gjuBDOBlx7X6Om1j2CPW4=
549+
golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
550550
golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
551551
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
552552
golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -718,8 +718,8 @@ google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGj
718718
google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
719719
google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
720720
google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
721-
google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
722-
google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
721+
google.golang.org/protobuf v1.33.0 h1:uNO2rsAINq/JlFpSdYEKIZ0uKD/R9cpdv0T+yoGwGmI=
722+
google.golang.org/protobuf v1.33.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
723723
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
724724
gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
725725
gopkg.in/check.v1 v1.0.0-20200902074654-038fdea0a05b/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -772,10 +772,10 @@ rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
772772
rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
773773
sigs.k8s.io/cluster-api v1.6.0 h1:2bhVSnUbtWI8taCjd9lGiHExsRUpKf7Z1fXqi/IwYx4=
774774
sigs.k8s.io/cluster-api v1.6.0/go.mod h1:LB7u/WxiWj4/bbpHNOa1oQ8nq0MQ5iYlD0pGfRSBGLI=
775-
sigs.k8s.io/cluster-api/test v1.6.0 h1:hvqUpSYxXCvs4FiEfsDpFZAfZ7i4kkP/59mVdFHlzSI=
776-
sigs.k8s.io/cluster-api/test v1.6.0/go.mod h1:DJtbkrnrH77cd3PnXeKCQDMtCGVCrHZHPOjMvEsLB2U=
777-
sigs.k8s.io/controller-runtime v0.16.3 h1:2TuvuokmfXvDUamSx1SuAOO3eTyye+47mJCigwG62c4=
778-
sigs.k8s.io/controller-runtime v0.16.3/go.mod h1:j7bialYoSn142nv9sCOJmQgDXQXxnroFU4VnX/brVJ0=
775+
sigs.k8s.io/cluster-api/test v1.6.3 h1:ZCboLCTpKWzSbf+f7MpQT7EN8aeH9DNhJC1T9/vAuAM=
776+
sigs.k8s.io/cluster-api/test v1.6.3/go.mod h1:AKs25dgW6AnyGaQBoWuXfWnBs+FT7vJmAI/aox64DEI=
777+
sigs.k8s.io/controller-runtime v0.16.5 h1:yr1cEJbX08xsTW6XEIzT13KHHmIyX8Umvme2cULvFZw=
778+
sigs.k8s.io/controller-runtime v0.16.5/go.mod h1:j7bialYoSn142nv9sCOJmQgDXQXxnroFU4VnX/brVJ0=
779779
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
780780
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
781781
sigs.k8s.io/kind v0.20.0 h1:f0sc3v9mQbGnjBUaqSFST1dwIuiikKVGgoTwpoP33a8=

templates/cluster-template-oci-addons.yaml

+87-65
Original file line numberDiff line numberDiff line change
@@ -219,10 +219,10 @@ data:
219219
- key: node.cloudprovider.kubernetes.io/uninitialized
220220
value: "true"
221221
effect: NoSchedule
222-
- key: node-role.kubernetes.io/master
222+
- key: node-role.kubernetes.io/control-plane
223223
operator: Exists
224224
effect: NoSchedule
225-
- key: node-role.kubernetes.io/control-plane
225+
- key: node-role.kubernetes.io/master
226226
operator: Exists
227227
effect: NoSchedule
228228
volumes:
@@ -234,12 +234,13 @@ data:
234234
path: /etc/kubernetes
235235
containers:
236236
- name: oci-cloud-controller-manager
237-
image: ghcr.io/oracle/cloud-provider-oci:v1.26.0
237+
image: ghcr.io/oracle/cloud-provider-oci:v1.28.0
238238
command: ["/usr/local/bin/oci-cloud-controller-manager"]
239239
args:
240240
- --cloud-config=/etc/oci/cloud-provider.yaml
241241
- --cloud-provider=oci
242-
- --leader-elect-resource-lock=configmapsleases
242+
- --leader-elect-resource-lock=leases
243+
- --concurrent-service-syncs=3
243244
- --v=2
244245
volumeMounts:
245246
- name: cfg
@@ -284,7 +285,7 @@ data:
284285
- list
285286
- watch
286287
- patch
287-
288+
- get
288289
- apiGroups:
289290
- ""
290291
resources:
@@ -380,6 +381,9 @@ data:
380381
- serviceaccounts
381382
verbs:
382383
- create
384+
- list
385+
- get
386+
- watch
383387
- apiGroups:
384388
- ""
385389
resources:
@@ -465,7 +469,7 @@ data:
465469
node-role.kubernetes.io/control-plane: ""
466470
containers:
467471
- name: csi-volume-provisioner
468-
image: registry.k8s.io/sig-storage/csi-provisioner:v3.5.0
472+
image: registry.k8s.io/sig-storage/csi-provisioner:v3.6.0
469473
args:
470474
- --csi-address=/var/run/shared-tmpfs/csi.sock
471475
- --volume-name-prefix=csi
@@ -480,7 +484,7 @@ data:
480484
- mountPath: /var/run/shared-tmpfs
481485
name: shared-tmpfs
482486
- name: csi-fss-volume-provisioner
483-
image: registry.k8s.io/sig-storage/csi-provisioner:v3.5.0
487+
image: registry.k8s.io/sig-storage/csi-provisioner:v3.6.0
484488
args:
485489
- --csi-address=/var/run/shared-tmpfs/csi-fss.sock
486490
- --volume-name-prefix=csi-fss
@@ -495,7 +499,7 @@ data:
495499
- mountPath: /var/run/shared-tmpfs
496500
name: shared-tmpfs
497501
- name: csi-attacher
498-
image: k8s.gcr.io/sig-storage/csi-attacher:v4.2.0
502+
image: registry.k8s.io/sig-storage/csi-attacher:v4.4.0
499503
args:
500504
- --csi-address=/var/run/shared-tmpfs/csi.sock
501505
- --timeout=120s
@@ -508,7 +512,24 @@ data:
508512
- mountPath: /var/run/shared-tmpfs
509513
name: shared-tmpfs
510514
- name: csi-resizer
511-
image: k8s.gcr.io/sig-storage/csi-resizer:v1.7.0
515+
image: registry.k8s.io/sig-storage/csi-resizer:v1.9.0
516+
args:
517+
- --csi-address=/var/run/shared-tmpfs/csi.sock
518+
- --leader-election
519+
imagePullPolicy: "IfNotPresent"
520+
volumeMounts:
521+
- mountPath: /var/run/shared-tmpfs
522+
name: shared-tmpfs
523+
- name: snapshot-controller
524+
image: registry.k8s.io/sig-storage/snapshot-controller:v6.2.0
525+
args:
526+
- --leader-election
527+
imagePullPolicy: "IfNotPresent"
528+
volumeMounts:
529+
- mountPath: /var/run/shared-tmpfs
530+
name: shared-tmpfs
531+
- name: csi-snapshotter
532+
image: registry.k8s.io/sig-storage/csi-snapshotter:v6.2.0
512533
args:
513534
- --csi-address=/var/run/shared-tmpfs/csi.sock
514535
- --leader-election
@@ -522,7 +543,7 @@ data:
522543
- --fss-csi-endpoint=unix://var/run/shared-tmpfs/csi-fss.sock
523544
command:
524545
- /usr/local/bin/oci-csi-controller-driver
525-
image: ghcr.io/oracle/cloud-provider-oci:v1.26.0
546+
image: ghcr.io/oracle/cloud-provider-oci:v1.28.0
526547
imagePullPolicy: IfNotPresent
527548
volumeMounts:
528549
- name: config
@@ -673,7 +694,7 @@ data:
673694
fieldPath: spec.nodeName
674695
- name: PATH
675696
value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/host/usr/bin:/host/sbin
676-
image: ghcr.io/oracle/cloud-provider-oci:v1.26.0
697+
image: ghcr.io/oracle/cloud-provider-oci:v1.28.0
677698
securityContext:
678699
privileged: true
679700
volumeMounts:
@@ -687,6 +708,7 @@ data:
687708
- mountPath: /dev
688709
name: device-dir
689710
- mountPath: /host
711+
mountPropagation: HostToContainer
690712
name: host-root
691713
- mountPath: /sbin/iscsiadm
692714
name: chroot-iscsiadm
@@ -707,7 +729,7 @@ data:
707729
args:
708730
- --csi-address=/csi/csi.sock
709731
- --kubelet-registration-path=/var/lib/kubelet/plugins/blockvolume.csi.oraclecloud.com/csi.sock
710-
image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.5.1
732+
image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.1
711733
securityContext:
712734
privileged: true
713735
lifecycle:
@@ -726,7 +748,7 @@ data:
726748
args:
727749
- --csi-address=/fss/csi.sock
728750
- --kubelet-registration-path=/var/lib/kubelet/plugins/fss.csi.oraclecloud.com/csi.sock
729-
image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.5.0
751+
image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.0
730752
securityContext:
731753
privileged: true
732754
lifecycle:
@@ -805,65 +827,65 @@ data:
805827
name: csi-oci
806828
namespace: kube-system
807829
rules:
808-
- apiGroups: [""]
809-
resources: ["events"]
810-
verbs: ["get", "list", "watch", "create", "update", "patch"]
811-
- apiGroups: [""]
812-
resources: ["nodes"]
813-
verbs: ["get", "list", "watch"]
814-
- apiGroups: ["volume.oci.oracle.com"]
815-
resources: ["blockscsiinfos"]
816-
verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
817-
- apiGroups: [""]
818-
resources: ["persistentvolumes"]
819-
verbs: ["get", "list", "watch", "create", "delete", "patch"]
820-
- apiGroups: [""]
821-
resources: ["persistentvolumeclaims"]
822-
verbs: ["get", "list", "watch", "update", "create"]
823-
- apiGroups: ["storage.k8s.io"]
824-
resources: ["storageclasses", "volumeattachments", "volumeattachments/status", "csinodes"]
825-
verbs: ["get", "list", "watch", "patch"]
826-
- apiGroups: ["coordination.k8s.io"]
827-
resources: ["leases"]
828-
verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
829-
- apiGroups: [""]
830-
resources: ["endpoints"]
831-
verbs: ["get", "watch", "create", "update"]
832-
- apiGroups: [""]
833-
resources: ["pods"]
834-
verbs: ["get", "list", "watch"]
835-
- apiGroups: [""]
836-
resources: ["persistentvolumeclaims/status"]
837-
verbs: ["patch"]
838-
- apiGroups: [ "snapshot.storage.k8s.io" ]
839-
resources: [ "volumesnapshotclasses" ]
840-
verbs: [ "get", "list", "watch" ]
841-
- apiGroups: [ "snapshot.storage.k8s.io" ]
842-
resources: [ "volumesnapshotcontents" ]
843-
verbs: [ "create", "get", "list", "watch", "update", "delete", "patch" ]
844-
- apiGroups: [ "snapshot.storage.k8s.io" ]
845-
resources: [ "volumesnapshotcontents/status" ]
846-
verbs: [ "update", "patch" ]
847-
- apiGroups: [ "snapshot.storage.k8s.io" ]
848-
resources: [ "volumesnapshots" ]
849-
verbs: [ "get", "list", "watch", "update", "patch" ]
850-
- apiGroups: [ "snapshot.storage.k8s.io" ]
851-
resources: [ "volumesnapshots/status" ]
852-
verbs: [ "update", "patch" ]
830+
- apiGroups: [""]
831+
resources: ["events"]
832+
verbs: ["get", "list", "watch", "create", "update", "patch"]
833+
- apiGroups: [""]
834+
resources: ["nodes"]
835+
verbs: ["get", "list", "watch"]
836+
- apiGroups: ["volume.oci.oracle.com"]
837+
resources: ["blockscsiinfos"]
838+
verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
839+
- apiGroups: [""]
840+
resources: ["persistentvolumes"]
841+
verbs: ["get", "list", "watch", "create", "delete", "patch"]
842+
- apiGroups: [""]
843+
resources: ["persistentvolumeclaims"]
844+
verbs: ["get", "list", "watch", "update", "create"]
845+
- apiGroups: ["storage.k8s.io"]
846+
resources: ["storageclasses", "volumeattachments", "volumeattachments/status", "csinodes"]
847+
verbs: ["get", "list", "watch", "patch"]
848+
- apiGroups: ["coordination.k8s.io"]
849+
resources: ["leases"]
850+
verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
851+
- apiGroups: [""]
852+
resources: ["endpoints"]
853+
verbs: ["get", "watch", "create", "update"]
854+
- apiGroups: [""]
855+
resources: ["pods"]
856+
verbs: ["get", "list", "watch"]
857+
- apiGroups: [""]
858+
resources: ["persistentvolumeclaims/status"]
859+
verbs: ["patch"]
860+
- apiGroups: [ "snapshot.storage.k8s.io" ]
861+
resources: [ "volumesnapshotclasses" ]
862+
verbs: [ "get", "list", "watch" ]
863+
- apiGroups: [ "snapshot.storage.k8s.io" ]
864+
resources: [ "volumesnapshotcontents" ]
865+
verbs: [ "create", "get", "list", "watch", "update", "delete", "patch" ]
866+
- apiGroups: [ "snapshot.storage.k8s.io" ]
867+
resources: [ "volumesnapshotcontents/status" ]
868+
verbs: [ "update", "patch" ]
869+
- apiGroups: [ "snapshot.storage.k8s.io" ]
870+
resources: [ "volumesnapshots" ]
871+
verbs: [ "get", "list", "watch", "update", "patch" ]
872+
- apiGroups: [ "snapshot.storage.k8s.io" ]
873+
resources: [ "volumesnapshots/status" ]
874+
verbs: [ "update", "patch" ]
853875
---
854876
855877
kind: ClusterRoleBinding
856878
apiVersion: rbac.authorization.k8s.io/v1
857879
metadata:
858-
name: csi-oci-binding
880+
name: csi-oci-binding
859881
subjects:
860-
- kind: ServiceAccount
861-
name: csi-oci-node-sa
862-
namespace: kube-system
882+
- kind: ServiceAccount
883+
name: csi-oci-node-sa
884+
namespace: kube-system
863885
roleRef:
864-
kind: ClusterRole
865-
name: csi-oci
866-
apiGroup: rbac.authorization.k8s.io
886+
kind: ClusterRole
887+
name: csi-oci
888+
apiGroup: rbac.authorization.k8s.io
867889
---
868890
kind: StorageClass
869891
apiVersion: storage.k8s.io/v1

0 commit comments

Comments
 (0)