Skip to content

Commit e18b5a6

Browse files
committed
fix: add node get permission for DaemonSet mount affinity checking
The CSI node service account needs 'get' permission on nodes to check if a DaemonSet can schedule on a specific node based on nodeAffinity. Without this permission, the DaemonSet mount falls back to shared-pod mode even when the node matches the affinity rules.
1 parent 26c4925 commit e18b5a6

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

deploy/k8s.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -255,6 +255,7 @@ rules:
255255
resources:
256256
- nodes
257257
verbs:
258+
- get
258259
- list
259260
- apiGroups:
260261
- apps

deploy/k8s_before_v1_18.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -255,6 +255,7 @@ rules:
255255
resources:
256256
- nodes
257257
verbs:
258+
- get
258259
- list
259260
- apiGroups:
260261
- apps

0 commit comments

Comments
 (0)