mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-23 11:50:44 +00:00
Allow write on events to edit role
Signed-off-by: Tomas Coufal <tcoufal@redhat.com>
This commit is contained in:
parent
28e0c4f5d1
commit
44cb4a63f6
@ -285,7 +285,7 @@ func ClusterRoles() []rbacv1.ClusterRole {
|
|||||||
|
|
||||||
rbacv1helpers.NewRule(Write...).Groups(legacyGroup).Resources("pods", "pods/attach", "pods/proxy", "pods/exec", "pods/portforward").RuleOrDie(),
|
rbacv1helpers.NewRule(Write...).Groups(legacyGroup).Resources("pods", "pods/attach", "pods/proxy", "pods/exec", "pods/portforward").RuleOrDie(),
|
||||||
rbacv1helpers.NewRule(Write...).Groups(legacyGroup).Resources("replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts",
|
rbacv1helpers.NewRule(Write...).Groups(legacyGroup).Resources("replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts",
|
||||||
"services", "services/proxy", "endpoints", "persistentvolumeclaims", "configmaps", "secrets").RuleOrDie(),
|
"services", "services/proxy", "endpoints", "persistentvolumeclaims", "configmaps", "secrets", "events").RuleOrDie(),
|
||||||
|
|
||||||
rbacv1helpers.NewRule(Write...).Groups(discoveryGroup).Resources("endpointslices").RuleOrDie(),
|
rbacv1helpers.NewRule(Write...).Groups(discoveryGroup).Resources("endpointslices").RuleOrDie(),
|
||||||
|
|
||||||
|
@ -129,6 +129,7 @@ items:
|
|||||||
resources:
|
resources:
|
||||||
- configmaps
|
- configmaps
|
||||||
- endpoints
|
- endpoints
|
||||||
|
- events
|
||||||
- persistentvolumeclaims
|
- persistentvolumeclaims
|
||||||
- replicationcontrollers
|
- replicationcontrollers
|
||||||
- replicationcontrollers/scale
|
- replicationcontrollers/scale
|
||||||
|
Loading…
Reference in New Issue
Block a user