1 Issue description：
May 2 03:35:04 oskm2 origin-master-api: I0502 07:35:04.348826 1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "list" resource "persistentvolumeclaims" cluster-wide
May 2 03:35:04 oskm2 origin-master-api: I0502 07:35:04.733607 1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "watch" resource "storageclasses.storage.k8s.io" cluster-wide
May 2 03:35:05 oskm2 origin-master-api: I0502 07:35:05.349569 1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "list" resource "persistentvolumes" cluster-wide
May 2 03:35:05 oskm2 origin-master-api: I0502 07:35:05.350587 1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "list" resource "persistentvolumeclaims" cluster-wide
May 2 03:35:05 oskm2 origin-master-api: I0502 07:35:05.739013 1 rbac.go:116] RBAC DENY: user "system:serviceaccount:glusterfs:glusterblock-storage-provisioner" groups ["system:serviceaccounts" "system:serviceaccounts:glusterfs" "system:authenticated"] cannot "watch" resource "storageclasses.storage.k8s.io" cluster-wide
2 Reasons Analysis
RBAC Roles issue， limits of authority。
3 Solution
Grant the role to the glusterfs user.
oc create clusterrolebinding glusterblock-storage-provisioner --clusterrole=glusterblock-provisioner-runner --user=system:serviceaccount:glusterfs:glusterblock-storage-provisioner
