github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-07 20:21:20 +00:00
Code Issues Projects Releases Wiki Activity

add rbac for events.k8s.io apiGroup to system:kube-scheduler

Browse Source 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
This commit is contained in:
Yassine TIJANI
2019-07-11 12:51:04 +02:00
parent 9138514fab
commit a024d48eba
5 changed files with 32 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/controller_policy.go
View File

@@ -50,7 +50,7 @@ func addControllerRole(controllerRoles *[]rbacv1.ClusterRole, controllerRoleBind
}
func eventsRule() rbacv1.PolicyRule {
return rbacv1helpers.NewRule("create", "update", "patch").Groups(legacyGroup).Resources("events").RuleOrDie()
return rbacv1helpers.NewRule("create", "update", "patch").Groups(legacyGroup, eventsGroup).Resources("events").RuleOrDie()
}
func buildControllerRoles() ([]rbacv1.ClusterRole, []rbacv1.ClusterRoleBinding) {

1
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View File

@@ -52,6 +52,7 @@ const (
resMetricsGroup = "metrics.k8s.io"
customMetricsGroup = "custom.metrics.k8s.io"
networkingGroup = "networking.k8s.io"
eventsGroup = "events.k8s.io"
)
func addDefaultMetadata(obj runtime.Object) {

5
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml vendored
View File

@@ -600,6 +600,7 @@ items:
rules:
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -693,6 +694,7 @@ items:
rules:
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1064,6 +1066,7 @@ items:
- patch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1096,6 +1099,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1147,6 +1151,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:

23
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml vendored
View File

@@ -42,6 +42,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -100,6 +101,7 @@ items:
- create
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -178,6 +180,7 @@ items:
- list
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -254,6 +257,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -318,6 +322,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -390,6 +395,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -433,6 +439,7 @@ items:
- create
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -497,6 +504,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -526,6 +534,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -593,6 +602,7 @@ items:
- list
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -642,6 +652,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -725,6 +736,7 @@ items:
- list
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -829,6 +841,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -880,6 +893,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -915,6 +929,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -967,6 +982,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1016,6 +1032,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1047,6 +1064,7 @@ items:
- update
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1078,6 +1096,7 @@ items:
- patch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1102,6 +1121,7 @@ items:
- create
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1142,6 +1162,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1216,6 +1237,7 @@ items:
- get
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -1243,6 +1265,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:

2
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/namespace-roles.yaml vendored
View File

@@ -29,6 +29,7 @@ items:
- update
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
@@ -167,6 +168,7 @@ items:
- watch
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs: