Allow MCM to delete VolumeAttachments

After gardener/machine-controller-manager#839 MCM provider extensions need to delete VolumeAttachments. See the PR description for more details. Co-authored-by: elankath <tarun.ramakrishna.elankath@sap.com> Co-authored-by: kon-angelo <konstantinos.angelopoulos@sap.com>
gardener-ci-robot · Nov 8, 2023 · 6597e92 · 6597e92
1 parent e012bbb
commit 6597e92
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/pkg/component/machinecontrollermanager/machine_controller_manager.go b/pkg/component/machinecontrollermanager/machine_controller_manager.go
@@ -386,7 +386,7 @@ func (m *machineControllerManager) computeShootResourcesData(serviceAccountName
 				{
 					APIGroups: []string{"storage.k8s.io"},
 					Resources: []string{"volumeattachments"},
-					Verbs:     []string{"get", "list", "watch"},
+					Verbs:     []string{"delete", "get", "list", "watch"},
 				},
 			},
 		}

diff --git a/pkg/component/machinecontrollermanager/machine_controller_manager_test.go b/pkg/component/machinecontrollermanager/machine_controller_manager_test.go
@@ -402,6 +402,7 @@ rules:
   resources:
   - volumeattachments
   verbs:
+  - delete
   - get
   - list
   - watch