mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-25 20:53:33 +00:00
Update addon manifests to use policy/v1beta1 and grant permissions in policy API group.
This commit is contained in:
parent
7966265a51
commit
044bf2e415
@ -8,7 +8,7 @@ metadata:
|
|||||||
addonmanager.kubernetes.io/mode: Reconcile
|
addonmanager.kubernetes.io/mode: Reconcile
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- extensions
|
- policy
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- gce.etcd-empty-dir-cleanup
|
- gce.etcd-empty-dir-cleanup
|
||||||
resources:
|
resources:
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
apiVersion: extensions/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: gce.etcd-empty-dir-cleanup
|
name: gce.etcd-empty-dir-cleanup
|
||||||
|
@ -8,7 +8,7 @@ metadata:
|
|||||||
addonmanager.kubernetes.io/mode: Reconcile
|
addonmanager.kubernetes.io/mode: Reconcile
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- extensions
|
- policy
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- gce.event-exporter
|
- gce.event-exporter
|
||||||
resources:
|
resources:
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
apiVersion: extensions/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: gce.event-exporter
|
name: gce.event-exporter
|
||||||
|
@ -8,7 +8,7 @@ metadata:
|
|||||||
addonmanager.kubernetes.io/mode: Reconcile
|
addonmanager.kubernetes.io/mode: Reconcile
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- extensions
|
- policy
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- gce.fluentd-gcp
|
- gce.fluentd-gcp
|
||||||
resources:
|
resources:
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
apiVersion: extensions/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: gce.fluentd-gcp
|
name: gce.fluentd-gcp
|
||||||
|
@ -11,7 +11,7 @@ metadata:
|
|||||||
addonmanager.kubernetes.io/mode: Reconcile
|
addonmanager.kubernetes.io/mode: Reconcile
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- extensions
|
- policy
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- gce.persistent-volume-binder
|
- gce.persistent-volume-binder
|
||||||
resources:
|
resources:
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
apiVersion: extensions/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: gce.persistent-volume-binder
|
name: gce.persistent-volume-binder
|
||||||
|
@ -7,7 +7,7 @@ metadata:
|
|||||||
addonmanager.kubernetes.io/mode: Reconcile
|
addonmanager.kubernetes.io/mode: Reconcile
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- extensions
|
- policy
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- gce.privileged
|
- gce.privileged
|
||||||
resources:
|
resources:
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
apiVersion: extensions/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: gce.privileged
|
name: gce.privileged
|
||||||
|
@ -8,7 +8,7 @@ metadata:
|
|||||||
addonmanager.kubernetes.io/mode: Reconcile
|
addonmanager.kubernetes.io/mode: Reconcile
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- extensions
|
- policy
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- gce.unprivileged-addon
|
- gce.unprivileged-addon
|
||||||
resources:
|
resources:
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
apiVersion: extensions/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: gce.unprivileged-addon
|
name: gce.unprivileged-addon
|
||||||
|
Loading…
Reference in New Issue
Block a user