github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-04 18:00:08 +00:00
Code Issues Projects Releases Wiki Activity

Allow proxier to write events

Browse Source
This commit is contained in:
Jordan Liggitt 2017-01-09 23:34:30 -05:00
parent 6d3b06125e
commit c6550af702
No known key found for this signature in database
GPG Key ID: 24E7ADF9A3B42012
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View File

@ -219,6 +219,8 @@ func ClusterRoles() []rbac.ClusterRole {
// Used to build serviceLister // Used to build serviceLister
rbac.NewRule("list", "watch").Groups(legacyGroup).Resources("services", "endpoints").RuleOrDie(), rbac.NewRule("list", "watch").Groups(legacyGroup).Resources("services", "endpoints").RuleOrDie(),
rbac.NewRule("get").Groups(legacyGroup).Resources("nodes").RuleOrDie(), rbac.NewRule("get").Groups(legacyGroup).Resources("nodes").RuleOrDie(),
eventsRule(),
}, },
}, },
{ {

9
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml vendored
View File

@ -621,6 +621,15 @@ items:
- nodes - nodes
verbs: verbs:
- get - get
- apiGroups:
- ""
attributeRestrictions: null
resources:
- events
verbs:
- create
- patch
- update
- apiVersion: rbac.authorization.k8s.io/v1alpha1 - apiVersion: rbac.authorization.k8s.io/v1alpha1
kind: ClusterRole kind: ClusterRole
metadata: metadata: