kubernetes-csi/csi-driver-nfs

helm chart volumesnapshot rbac problem

akirose opened this issue · 1 comments

akirose commented

What happened:
It seems there is an issue with the RBAC configuration in the Helm chart. The csi-nfs-controller always includes the csi-snapshotter container. However, the csi-snapshotter container requires permissions for volumesnapshotcontents.snapshot.storage.k8s.io, but in the Helm chart, these permissions are only applied if the externalSnapshotter.enabled value in the Values is set to true.

What you expected to happen:
If the functionality is not intended to be used, the csi-snapshotter container should be excluded, and the related RBAC should not be applied. There should be a configuration option in the Values to handle this scenario.

How to reproduce it:
To install the chart with this setting, set the externalSnapshotter.enabled value to false.

Anything else we need to know?:

Environment:

  • CSI Driver version: 4.6.0
  • Kubernetes version (use kubectl version): 1.28.3
  • OS (e.g. from /etc/os-release): Ubuntu 22.04
  • Kernel (e.g. uname -a):
  • Install tools: helm
  • Others:
akirose commented

@andyzhangx thank you!