From a59f3490c97f55a8f6b6a53c598ee1ff0dead8df Mon Sep 17 00:00:00 2001
From: Cao Shufeng <caosf.fnst@cn.fujitsu.com>
Date: Thu, 29 Jun 2017 14:56:46 +0800
Subject: [PATCH] allow impersonate serviceaccount in cli

We can impersonate four kinds of resources according to the code:
https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/endpoints/filters/impersonation.go#L83
---
 pkg/kubectl/cmd/create_role.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkg/kubectl/cmd/create_role.go b/pkg/kubectl/cmd/create_role.go
index 723664bf1f7..56531d82144 100644
--- a/pkg/kubectl/cmd/create_role.go
+++ b/pkg/kubectl/cmd/create_role.go
@@ -77,6 +77,10 @@ var (
 				Group:    "",
 				Resource: "users",
 			},
+			{
+				Group:    "",
+				Resource: "serviceaccounts",
+			},
 			{
 				Group:    "",
 				Resource: "groups",