Update pipeline-runner permissions (kubeflow#186)

* Supplement pipeline-runner permissions according to kubeflow#2556
arrikto · Jun 29, 2019 · 697b092 · 697b092
1 parent b8ea51b
commit 697b092
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/pipeline/pipelines-runner/base/cluster-role.yaml b/pipeline/pipelines-runner/base/cluster-role.yaml
@@ -24,6 +24,15 @@ rules:
   verbs:
   - create
   - delete
+  - get
+- apiGroups:
+  - snapshot.storage.k8s.io
+  resources:
+  - volumesnapshots
+  verbs:
+  - create
+  - delete
+  - get
 - apiGroups:
   - argoproj.io
   resources:

diff --git a/tests/pipelines-runner-base_test.go b/tests/pipelines-runner-base_test.go
@@ -52,6 +52,15 @@ rules:
   verbs:
   - create
   - delete
+  - get
+- apiGroups:
+  - snapshot.storage.k8s.io
+  resources:
+  - volumesnapshots
+  verbs:
+  - create
+  - delete
+  - get
 - apiGroups:
   - argoproj.io
   resources: