From d330ae40a2049c7c24d0b90a624e84ee97a0cee6 Mon Sep 17 00:00:00 2001
From: Aleksandr Zimin <alexandr.zimin@flant.com>
Date: Mon, 4 Nov 2024 18:23:01 +0300
Subject: [PATCH] fix rbac

Signed-off-by: Aleksandr Zimin <alexandr.zimin@flant.com>
---
 .../rbac-for-us.yaml                              | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/templates/sds-health-watcher-controller/rbac-for-us.yaml b/templates/sds-health-watcher-controller/rbac-for-us.yaml
index e7c93e14..747f513f 100644
--- a/templates/sds-health-watcher-controller/rbac-for-us.yaml
+++ b/templates/sds-health-watcher-controller/rbac-for-us.yaml
@@ -26,13 +26,20 @@ rules:
       - "storage.deckhouse.io"
     resources:
       - blockdevices
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - "storage.deckhouse.io"
+    resources:
       - lvmvolumegroupsets
       - lvmvolumegroupsets/status
     verbs:
       - get
       - list
-      - update
       - watch
+      - update
   - apiGroups:
       - "storage.deckhouse.io"
     resources:
@@ -41,8 +48,8 @@ rules:
     verbs:
       - get
       - list
-      - update
       - watch
+      - update
       - create
   - apiGroups:
       - ""
@@ -59,11 +66,11 @@ rules:
       - leases
     verbs:
       - get
-      - watch
       - list
-      - delete
+      - watch
       - update
       - create
+      - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding