From 954f8aec96d2d1362dd2cb0d7d640ceab8cb32c4 Mon Sep 17 00:00:00 2001 From: Jathavedhan M Date: Wed, 10 Jun 2026 10:30:26 +0530 Subject: [PATCH] [manila-csi-plugin] Remove rules from aggregated ClusterRoles to avoid SSA conflicts When a ClusterRole uses aggregationRule, the clusterrole-aggregation-controller owns the .rules field. Explicitly setting `rules: []` in the Helm template causes a field manager conflict with Helm v4's Server-Side Apply on upgrades. Omit the field entirely so ownership is not contested. Signed-off-by: Jathavedhan M --- .../templates/controllerplugin-clusterrole.yaml | 1 - charts/manila-csi-plugin/templates/nodeplugin-clusterrole.yaml | 1 - 2 files changed, 2 deletions(-) diff --git a/charts/manila-csi-plugin/templates/controllerplugin-clusterrole.yaml b/charts/manila-csi-plugin/templates/controllerplugin-clusterrole.yaml index 75313f8063..2fd8107be8 100644 --- a/charts/manila-csi-plugin/templates/controllerplugin-clusterrole.yaml +++ b/charts/manila-csi-plugin/templates/controllerplugin-clusterrole.yaml @@ -8,4 +8,3 @@ aggregationRule: clusterRoleSelectors: - matchLabels: rbac.manila.csi.openstack.org/aggregate-to-controller-{{ include "openstack-manila-csi.name" . }}: "true" -rules: [] diff --git a/charts/manila-csi-plugin/templates/nodeplugin-clusterrole.yaml b/charts/manila-csi-plugin/templates/nodeplugin-clusterrole.yaml index f8261b83a6..9177142d5f 100644 --- a/charts/manila-csi-plugin/templates/nodeplugin-clusterrole.yaml +++ b/charts/manila-csi-plugin/templates/nodeplugin-clusterrole.yaml @@ -8,4 +8,3 @@ aggregationRule: clusterRoleSelectors: - matchLabels: rbac.manila.csi.openstack.org/aggregate-to-nodeplugin-{{ include "openstack-manila-csi.name" . }}: "true" -rules: []