fix role for pod-garbage-collector

This commit is contained in:
Jordan Liggitt 2017-01-09 22:59:06 -05:00
parent bda95a59ad
commit c59c11eb0d
No known key found for this signature in database
GPG Key ID: 24E7ADF9A3B42012
3 changed files with 5 additions and 5 deletions

View File

@ -192,7 +192,7 @@ func init() {
}, },
}) })
addControllerRole(rbac.ClusterRole{ addControllerRole(rbac.ClusterRole{
ObjectMeta: api.ObjectMeta{Name: saRolePrefix + "pod-garbage-controller"}, ObjectMeta: api.ObjectMeta{Name: saRolePrefix + "pod-garbage-collector"},
Rules: []rbac.PolicyRule{ Rules: []rbac.PolicyRule{
rbac.NewRule("list", "watch", "delete").Groups(legacyGroup).Resources("pods").RuleOrDie(), rbac.NewRule("list", "watch", "delete").Groups(legacyGroup).Resources("pods").RuleOrDie(),
rbac.NewRule("list").Groups(legacyGroup).Resources("nodes").RuleOrDie(), rbac.NewRule("list").Groups(legacyGroup).Resources("nodes").RuleOrDie(),

View File

@ -186,14 +186,14 @@ items:
creationTimestamp: null creationTimestamp: null
labels: labels:
kubernetes.io/bootstrapping: rbac-defaults kubernetes.io/bootstrapping: rbac-defaults
name: system:controller:pod-garbage-controller name: system:controller:pod-garbage-collector
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole
name: system:controller:pod-garbage-controller name: system:controller:pod-garbage-collector
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: pod-garbage-controller name: pod-garbage-collector
namespace: kube-system namespace: kube-system
- apiVersion: rbac.authorization.k8s.io/v1alpha1 - apiVersion: rbac.authorization.k8s.io/v1alpha1
kind: ClusterRoleBinding kind: ClusterRoleBinding

View File

@ -664,7 +664,7 @@ items:
creationTimestamp: null creationTimestamp: null
labels: labels:
kubernetes.io/bootstrapping: rbac-defaults kubernetes.io/bootstrapping: rbac-defaults
name: system:controller:pod-garbage-controller name: system:controller:pod-garbage-collector
rules: rules:
- apiGroups: - apiGroups:
- "" - ""