From cf3064f546b00bea4bb0b6a9d41f911d9273b1f8 Mon Sep 17 00:00:00 2001
From: fallmo <58644999+fallmo@users.noreply.github.com>
Date: Fri, 16 Sep 2022 10:10:15 +0000
Subject: [PATCH] Update attacher.yaml

---
 deploy/kubernetes/attacher.yaml | 25 ++-----------------------
 1 file changed, 2 insertions(+), 23 deletions(-)

diff --git a/deploy/kubernetes/attacher.yaml b/deploy/kubernetes/attacher.yaml
index e587d21..b484d7b 100644
--- a/deploy/kubernetes/attacher.yaml
+++ b/deploy/kubernetes/attacher.yaml
@@ -4,27 +4,6 @@ metadata:
   name: csi-attacher-sa
   namespace: kube-system
 ---
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: external-attacher-runner
-rules:
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get", "list"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["volumeattachments"]
-    verbs: ["get", "list", "watch", "update", "patch"]
----
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -35,7 +14,7 @@ subjects:
     namespace: kube-system
 roleRef:
   kind: ClusterRole
-  name: external-attacher-runner
+  name: cluster-admin
   apiGroup: rbac.authorization.k8s.io
 ---
 # needed for StatefulSet
@@ -75,7 +54,7 @@ spec:
         operator: "Exists"
       containers:
         - name: csi-attacher
-          image: quay.io/k8scsi/csi-attacher:v2.2.0
+          image: quay.io/k8scsi/csi-attacher:canary
           args:
             - "--v=4"
             - "--csi-address=$(ADDRESS)"