github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-04 18:00:08 +00:00
Code Issues Projects Releases Wiki Activity

Allow the persistent volume binder to watch events

Browse Source
This commit is contained in:
Jordan Liggitt 2017-01-09 23:28:22 -05:00
parent c59c11eb0d
commit 6d3b06125e
No known key found for this signature in database
GPG Key ID: 24E7ADF9A3B42012
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/controller_policy.go
View File

@ -188,6 +188,9 @@ func init() {
rbac.NewRule("get", "create", "delete").Groups(legacyGroup).Resources("services", "endpoints").RuleOrDie(), rbac.NewRule("get", "create", "delete").Groups(legacyGroup).Resources("services", "endpoints").RuleOrDie(),
rbac.NewRule("get").Groups(legacyGroup).Resources("secrets").RuleOrDie(), rbac.NewRule("get").Groups(legacyGroup).Resources("secrets").RuleOrDie(),
// recyclerClient.WatchPod
rbac.NewRule("watch").Groups(legacyGroup).Resources("events").RuleOrDie(),
eventsRule(), eventsRule(),
}, },
}) })

7
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml vendored
View File

@ -649,6 +649,13 @@ items:
- secrets - secrets
verbs: verbs:
- get - get
- apiGroups:
- ""
attributeRestrictions: null
resources:
- events
verbs:
- watch
- apiGroups: - apiGroups:
- "" - ""
attributeRestrictions: null attributeRestrictions: null