1 Issue description：

May  2 03:35:04 oskm2 origin-master-api: I0502 07:35:04.348826       1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "list" resource "persistentvolumeclaims" cluster-wide
May  2 03:35:04 oskm2 origin-master-api: I0502 07:35:04.733607       1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "watch" resource "storageclasses.storage.k8s.io" cluster-wide
May  2 03:35:05 oskm2 origin-master-api: I0502 07:35:05.349569       1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "list" resource "persistentvolumes" cluster-wide
May  2 03:35:05 oskm2 origin-master-api: I0502 07:35:05.350587       1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "list" resource "persistentvolumeclaims" cluster-wide
May  2 03:35:05 oskm2 origin-master-api: I0502 07:35:05.739013       1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "watch" resource "storageclasses.storage.k8s.io" cluster-wide

2 Reasons Analysis

RBAC Roles issue， limits of authority。

3 Solution

Grant the role to the glusterfs user.

oc create clusterrolebinding glusterblock-storage-provisioner --clusterrole=glusterblock-provisioner-runner --user=system:serviceaccount:glusterfs:glusterblock-storage-provisioner