github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-22 11:21:47 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #80030 from yastij/bootstrap-policy

Browse Source 
add rbac for events.k8s.io apiGroup to system:kube-scheduler
This commit is contained in:
Kubernetes Prow Robot 2019-07-11 11:25:20 -07:00 committed by GitHub
commit 2659b3755a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 32 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/controller_policy.go
View File

@ -50,7 +50,7 @@ func addControllerRole(controllerRoles *[]rbacv1.ClusterRole, controllerRoleBind
}
func eventsRule() rbacv1.PolicyRule {
return rbacv1helpers.NewRule("create", "update", "patch").Groups(legacyGroup).Resources("events").RuleOrDie()
return rbacv1helpers.NewRule("create", "update", "patch").Groups(legacyGroup, eventsGroup).Resources("events").RuleOrDie()
}
func buildControllerRoles() ([]rbacv1.ClusterRole, []rbacv1.ClusterRoleBinding) {

1
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View File

@ -52,6 +52,7 @@ const (
resMetricsGroup = "metrics.k8s.io"
customMetricsGroup = "custom.metrics.k8s.io"
networkingGroup = "networking.k8s.io"
eventsGroup = "events.k8s.io"
)
func addDefaultMetadata(obj runtime.Object) {

5
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml vendored
View File

@ -600,6 +600,7 @@ items:
rules:
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -693,6 +694,7 @@ items:
rules:
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1064,6 +1066,7 @@ items:
- patch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1096,6 +1099,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1147,6 +1151,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:

23
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml vendored
View File

@ -42,6 +42,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -100,6 +101,7 @@ items:
- create
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -178,6 +180,7 @@ items:
- list
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -254,6 +257,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -318,6 +322,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -390,6 +395,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -433,6 +439,7 @@ items:
- create
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -497,6 +504,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -526,6 +534,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -593,6 +602,7 @@ items:
- list
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -642,6 +652,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -725,6 +736,7 @@ items:
- list
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -829,6 +841,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -880,6 +893,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -915,6 +929,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -967,6 +982,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1016,6 +1032,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1047,6 +1064,7 @@ items:
- update
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1078,6 +1096,7 @@ items:
- patch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1102,6 +1121,7 @@ items:
- create
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1142,6 +1162,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1216,6 +1237,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -1243,6 +1265,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:

2
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/namespace-roles.yaml vendored
View File

@ -29,6 +29,7 @@ items:
- update
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@ -167,6 +168,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs: