github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-24 20:24:09 +00:00
Code Issues Projects Releases Wiki Activity

add statefulset scaling permission to admins, editors, and viewers

Browse Source
This commit is contained in:
David Eads 2018-04-10 08:11:17 -04:00
parent 501f58b4ba
commit d280c115d4
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View File

@ -236,7 +236,8 @@ func ClusterRoles() []rbac.ClusterRole {
rbac.NewRule(Read...).Groups(legacyGroup).Resources("namespaces").RuleOrDie(), rbac.NewRule(Read...).Groups(legacyGroup).Resources("namespaces").RuleOrDie(),
rbac.NewRule("impersonate").Groups(legacyGroup).Resources("serviceaccounts").RuleOrDie(), rbac.NewRule("impersonate").Groups(legacyGroup).Resources("serviceaccounts").RuleOrDie(),
rbac.NewRule(ReadWrite...).Groups(appsGroup).Resources("statefulsets", rbac.NewRule(ReadWrite...).Groups(appsGroup).Resources(
"statefulsets", "statefulsets/scale",
"daemonsets", "daemonsets",
"deployments", "deployments/scale", "deployments/rollback", "deployments", "deployments/scale", "deployments/rollback",
"replicasets", "replicasets/scale").RuleOrDie(), "replicasets", "replicasets/scale").RuleOrDie(),
@ -275,7 +276,8 @@ func ClusterRoles() []rbac.ClusterRole {
rbac.NewRule(Read...).Groups(legacyGroup).Resources("namespaces").RuleOrDie(), rbac.NewRule(Read...).Groups(legacyGroup).Resources("namespaces").RuleOrDie(),
rbac.NewRule("impersonate").Groups(legacyGroup).Resources("serviceaccounts").RuleOrDie(), rbac.NewRule("impersonate").Groups(legacyGroup).Resources("serviceaccounts").RuleOrDie(),
rbac.NewRule(ReadWrite...).Groups(appsGroup).Resources("statefulsets", rbac.NewRule(ReadWrite...).Groups(appsGroup).Resources(
"statefulsets", "statefulsets/scale",
"daemonsets", "daemonsets",
"deployments", "deployments/scale", "deployments/rollback", "deployments", "deployments/scale", "deployments/rollback",
"replicasets", "replicasets/scale").RuleOrDie(), "replicasets", "replicasets/scale").RuleOrDie(),
@ -307,7 +309,8 @@ func ClusterRoles() []rbac.ClusterRole {
// indicator of which namespaces you have access to. // indicator of which namespaces you have access to.
rbac.NewRule(Read...).Groups(legacyGroup).Resources("namespaces").RuleOrDie(), rbac.NewRule(Read...).Groups(legacyGroup).Resources("namespaces").RuleOrDie(),
rbac.NewRule(Read...).Groups(appsGroup).Resources("statefulsets", rbac.NewRule(Read...).Groups(appsGroup).Resources(
"statefulsets", "statefulsets/scale",
"daemonsets", "daemonsets",
"deployments", "deployments/scale", "deployments", "deployments/scale",
"replicasets", "replicasets/scale").RuleOrDie(), "replicasets", "replicasets/scale").RuleOrDie(),

3
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml vendored
View File

@ -137,6 +137,7 @@ items:
- replicasets - replicasets
- replicasets/scale - replicasets/scale
- statefulsets - statefulsets
- statefulsets/scale
verbs: verbs:
- create - create
- delete - delete
@ -329,6 +330,7 @@ items:
- replicasets - replicasets
- replicasets/scale - replicasets/scale
- statefulsets - statefulsets
- statefulsets/scale
verbs: verbs:
- create - create
- delete - delete
@ -471,6 +473,7 @@ items:
- replicasets - replicasets
- replicasets/scale - replicasets/scale
- statefulsets - statefulsets
- statefulsets/scale
verbs: verbs:
- get - get
- list - list