update chart of storageclass-accessor

Signed-off-by: stoneshi-yunify <stoneshi@kubesphere.io>

src/main/storageclass-accessor/Chart.yaml

@@ -6,5 +6,5 @@ sources:
   - https://github.com/kubesphere/storageclass-accessor
 
 type: application
-version: 0.1.0
-appVersion: v0.1.1
+version: 0.1.1
+appVersion: v0.1.2

src/main/storageclass-accessor/README.md

@@ -28,7 +28,8 @@ helm delete storageclass-accessor --namespace storageclass-accessor
 
 The following table lists the configurable parameters of the chart and their default values.
 
-Parameter | Description | Default
+Parameter | Description                                                 | Default
 --- | --- | ---
-`image.repository` | Image repository of accessor deployment | `kubesphere/storageclass-accessor`
+`image.repository` | Image repository of accessor deployment                     | `kubesphere/storageclass-accessor`
+`image.tag` | Image tag of accessor deployment                            | `latest`
 `webhook.timeoutSeconds` | The maximum number of seconds used by the webhook to verify | `5`

src/main/storageclass-accessor/templates/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: storageclass-accessor
-          image: "{{ .Values.image.repository }}:{{  .Chart.AppVersion  }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
           imagePullPolicy: IfNotPresent
           args: ['--tls-cert-file=/etc/storageclass-accessor-webhook/certs/cert.pem', '--tls-private-key-file=/etc/storageclass-accessor-webhook/certs/key.pem']
           ports:

src/main/storageclass-accessor/templates/rbac.yaml

@@ -14,15 +14,15 @@ metadata:
 rules:
   - apiGroups: [ "" ]
     resources: [ "namespaces" ]
-    verbs: [ "get", "list", "watch", "create", "delete", "update" ]
+    verbs: [ "get", "list", "watch"]
 
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "create", "delete", "update"]
+    verbs: ["get", "list", "watch"]
 
   - apiGroups: ["storage.kubesphere.io"]
     resources: ["accessors"]
-    verbs: [ "get", "list", "watch", "create", "delete", "update"]
+    verbs: [ "get", "list", "watch"]
 
 ---
 kind: ClusterRoleBinding

src/main/storageclass-accessor/templates/validatingwebhook.yaml

@@ -23,7 +23,7 @@ webhooks:
     rules:
       - apiGroups:   [""]
         apiVersions: ["v1"]
-        operations:  ["CREATE", "UPDATE", "DELETE"]
+        operations:  ["CREATE"]
         resources:   ["persistentvolumeclaims"]
         scope:       "*"
     clientConfig:

src/main/storageclass-accessor/values.yaml

@@ -1,5 +1,6 @@
 image:
   repository: kubesphere/storageclass-accessor
+  tag: latest
 
 webhook:
   timeoutSeconds: 5