From 7648aa2a93a50a0247d9813ef6750019479ead8b Mon Sep 17 00:00:00 2001 From: Eric Tune Date: Fri, 30 Jan 2015 11:04:35 -0800 Subject: [PATCH] update ABAC example with right kubelet/proxy perms. --- pkg/auth/authorizer/abac/example_policy_file.jsonl | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pkg/auth/authorizer/abac/example_policy_file.jsonl b/pkg/auth/authorizer/abac/example_policy_file.jsonl index 7842fa89749..ba566f16ea3 100644 --- a/pkg/auth/authorizer/abac/example_policy_file.jsonl +++ b/pkg/auth/authorizer/abac/example_policy_file.jsonl @@ -1,7 +1,9 @@ {"user":"admin"} {"user":"scheduler", "readonly": true, "kind": "pods"} {"user":"scheduler", "kind": "bindings"} -{"user":"kubelet", "readonly": true, "kind": "bindings"} +{"user":"kubelet", "readonly": true, "kind": "pods"} +{"user":"kubelet", "readonly": true, "kind": "services"} +{"user":"kubelet", "readonly": true, "kind": "endpoints"} {"user":"kubelet", "kind": "events"} {"user":"alice", "ns": "projectCaribou"} {"user":"bob", "readonly": true, "ns": "projectCaribou"}