Skip to content

Commit 1eb5a4a

Browse files
committed
fix: grant more permissions to cloud node lifecycle controller
1 parent 73e4369 commit 1eb5a4a

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

Diff for: internal/node/utils.go

+3-2
Original file line numberDiff line numberDiff line change
@@ -37,8 +37,9 @@ func startCloudNodeLifecycleController(ctx context.Context,
3737
// Start the cloudNodeLifecycleController
3838
cloudNodeLifecycleController, err := NewCloudNodeLifecycleController(
3939
completedConfig.SharedInformers.Core().V1().Nodes(),
40-
// cloud node lifecycle controller uses existing cluster role from node-controller
41-
completedConfig.ClientBuilder.ClientOrDie(initContext.ClientName),
40+
// use crusoe-ccm-sa ServiceAccount because custom node lifecycle controller needs
41+
// permissions to list and delete VolumeAttachments
42+
completedConfig.ClientBuilder.ClientOrDie("crusoe-ccm-sa"),
4243
cloud,
4344
completedConfig.ComponentConfig.KubeCloudShared.NodeMonitorPeriod.Duration,
4445
)

0 commit comments

Comments
 (0)