mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-11 21:12:07 +00:00
Merge pull request #47482 from timstclair/audit-policy
Automatic merge from submit-queue (batch tested with PRs 47510, 47516, 47482, 47521, 47537) Fix typos in audit policy config For kubernetes/features#22
This commit is contained in:
commit
454233512d
@ -509,7 +509,7 @@ rules:
|
|||||||
# Ingress controller reads `configmaps/ingress-uid` through the unsecured port.
|
# Ingress controller reads `configmaps/ingress-uid` through the unsecured port.
|
||||||
# TODO(#46983): Change this to the ingress controller service account.
|
# TODO(#46983): Change this to the ingress controller service account.
|
||||||
users: ["system:unsecured"]
|
users: ["system:unsecured"]
|
||||||
namespaces: ["kube-sytem"]
|
namespaces: ["kube-system"]
|
||||||
verbs: ["get"]
|
verbs: ["get"]
|
||||||
resources:
|
resources:
|
||||||
- group: "" # core
|
- group: "" # core
|
||||||
@ -521,7 +521,7 @@ rules:
|
|||||||
- group: "" # core
|
- group: "" # core
|
||||||
resources: ["nodes"]
|
resources: ["nodes"]
|
||||||
- level: None
|
- level: None
|
||||||
groups: ["system:nodes"]
|
userGroups: ["system:nodes"]
|
||||||
verbs: ["get"]
|
verbs: ["get"]
|
||||||
resources:
|
resources:
|
||||||
- group: "" # core
|
- group: "" # core
|
||||||
@ -532,7 +532,7 @@ rules:
|
|||||||
- system:kube-scheduler
|
- system:kube-scheduler
|
||||||
- system:serviceaccount:kube-system:endpoint-controller
|
- system:serviceaccount:kube-system:endpoint-controller
|
||||||
verbs: ["get", "update"]
|
verbs: ["get", "update"]
|
||||||
namespaces: ["kube-sytem"]
|
namespaces: ["kube-system"]
|
||||||
resources:
|
resources:
|
||||||
- group: "" # core
|
- group: "" # core
|
||||||
resources: ["endpoints"]
|
resources: ["endpoints"]
|
||||||
|
Loading…
Reference in New Issue
Block a user