Skip to content

K
k3s
Unverified Commit 02bd34e7 authored by Kubernetes Prow Robot's avatar Kubernetes Prow Robot Committed by GitHub
Browse files
Options

Merge pull request #74531 from liggitt/ingress-rbac

Update RBAC roles for networking.k8s.io ingresses
parents baf4eb67 85165b40
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 2 deletions
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View file @ 02bd34e7
...@@ -292,7 +292,7 @@ func ClusterRoles() []rbacv1.ClusterRole { ...@@ -292,7 +292,7 @@ func ClusterRoles() []rbacv1.ClusterRole {
rbacv1helpers.NewRule(Write...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(), rbacv1helpers.NewRule(Write...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(),
rbacv1helpers.NewRule(Write...).Groups(networkingGroup).Resources("networkpolicies").RuleOrDie(), rbacv1helpers.NewRule(Write...).Groups(networkingGroup).Resources("networkpolicies", "ingresses").RuleOrDie(),
}, },
}, },
{ {
...@@ -325,7 +325,7 @@ func ClusterRoles() []rbacv1.ClusterRole { ...@@ -325,7 +325,7 @@ func ClusterRoles() []rbacv1.ClusterRole {
rbacv1helpers.NewRule(Read...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(), rbacv1helpers.NewRule(Read...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(),
rbacv1helpers.NewRule(Read...).Groups(networkingGroup).Resources("networkpolicies").RuleOrDie(), rbacv1helpers.NewRule(Read...).Groups(networkingGroup).Resources("networkpolicies", "ingresses").RuleOrDie(),
}, },
}, },
{ {
......
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml
View file @ 02bd34e7
...@@ -211,6 +211,7 @@ items: ...@@ -211,6 +211,7 @@ items:
- apiGroups: - apiGroups:
- networking.k8s.io - networking.k8s.io
resources: resources:
- ingresses
- networkpolicies - networkpolicies
verbs: verbs:
- create - create
...@@ -326,6 +327,7 @@ items: ...@@ -326,6 +327,7 @@ items:
- apiGroups: - apiGroups:
- networking.k8s.io - networking.k8s.io
resources: resources:
- ingresses
- networkpolicies - networkpolicies
verbs: verbs:
- get - get
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment