Kubernetes Submit Queue f575c55589 Merge pull request #54005 from deads2k/rbac-02-aggregation ...

Automatic merge from submit-queue (batch tested with PRs 54005, 55127, 53850, 55486, 53440). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

aggregate cluster roles

xref https://github.com/kubernetes/community/pull/1219 https://github.com/kubernetes/features/issues/502

This is a pull with API types, a controller, and a demonstration of how to move admin, edit, and view.  Once we agree on the shape, I'll 


I added 
```yaml
aggregationRule:
  clusterRoleSelectors:
  - matchLabels:
      rbac.authorization.k8s.io/aggregate-to-admin: true
```
to the `ClusterRole`.  A controller then goes and gathers all the matching ClusterRoles and sets the `rules` to the union of matching cluster roles.

@kubernetes/sig-auth-pr-reviews 

```release-note
RBAC ClusterRoles can now select other roles to aggregate
```

2017-11-13 16:45:20 -08:00

..

admission

add type assertions to admission plugins

2017-11-13 09:20:31 -05:00

auth

handle clusterrole migration

2017-11-13 08:18:00 -05:00

scheduler

Merge pull request #52148 from wackxu/addmtcase

2017-11-13 00:50:11 -08:00