deploy/base/controller/controller_setup.yaml [61:85]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
roleRef:
  kind: ClusterRole
  name: lustre-csi-provisioner-role
  apiGroup: rbac.authorization.k8s.io
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: lustre-csi-leaderelection-role
  labels:
    k8s-app: lustre-csi-driver
rules:
- apiGroups: ["coordination.k8s.io"]
  resources: ["leases"]
  verbs: ["get", "watch", "list", "delete", "update", "create"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: lustre-csi-leaderelection-binding
  labels:
    k8s-app: lustre-csi-driver
subjects:
  - kind: ServiceAccount
    name: lustre-csi-controller-sa
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



helm/lustre-csi-driver/templates/controller-serviceaccount.yaml [61:85]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
roleRef:
  kind: ClusterRole
  name: lustre-csi-provisioner-role
  apiGroup: rbac.authorization.k8s.io
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: lustre-csi-leaderelection-role
  labels:
    k8s-app: lustre-csi-driver
rules:
- apiGroups: ["coordination.k8s.io"]
  resources: ["leases"]
  verbs: ["get", "watch", "list", "delete", "update", "create"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: lustre-csi-leaderelection-binding
  labels:
    k8s-app: lustre-csi-driver
subjects:
  - kind: ServiceAccount
    name: lustre-csi-controller-sa
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



