github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-27 13:37:30 +00:00
Code Issues Projects Releases Wiki Activity

Add /swagger.json and /swagger-2.0.0.pb-v1 to discovery role

Browse Source
This commit is contained in:
Jordan Liggitt 2017-10-02 21:52:13 -04:00
parent 5e2ce3aaf2
commit d657261f9b
No known key found for this signature in database
GPG Key ID: 39928704103C7229
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View File

@ -152,7 +152,16 @@ func ClusterRoles() []rbac.ClusterRole {
// a role which provides just enough power to determine if the server is ready and discover API versions for negotiation // a role which provides just enough power to determine if the server is ready and discover API versions for negotiation
ObjectMeta: metav1.ObjectMeta{Name: "system:discovery"}, ObjectMeta: metav1.ObjectMeta{Name: "system:discovery"},
Rules: []rbac.PolicyRule{ Rules: []rbac.PolicyRule{
rbac.NewRule("get").URLs("/healthz", "/version", "/swaggerapi", "/swaggerapi/*", "/api", "/api/*", "/apis", "/apis/*").RuleOrDie(), rbac.NewRule("get").URLs(
"/healthz", "/version",
// remove once swagger 1.2 support is removed
"/swaggerapi", "/swaggerapi/*",
// do not expand this pattern for openapi discovery docs
// move to a single openapi endpoint that takes accept/accept-encoding headers
"/swagger.json", "/swagger-2.0.0.pb-v1",
"/api", "/api/*",
"/apis", "/apis/*",
).RuleOrDie(),
}, },
}, },
{ {

2
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml vendored
View File

@ -434,6 +434,8 @@ items:
- /apis - /apis
- /apis/* - /apis/*
- /healthz - /healthz
- /swagger-2.0.0.pb-v1
- /swagger.json
- /swaggerapi - /swaggerapi
- /swaggerapi/* - /swaggerapi/*
- /version - /version