Skip to content

K
k3s
Commit aa7bc258 authored by Anthony Yeh's avatar Anthony Yeh
Browse files
Options

Job: Add PATCH Pods permission.

This is needed to update ControllerRef during adopt/release.
parent f502ab6a
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 1 deletion
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/controller_policy.go
View file @ aa7bc258
...@@ -152,7 +152,7 @@ func init() { ...@@ -152,7 +152,7 @@ func init() {
Rules: []rbac.PolicyRule{ Rules: []rbac.PolicyRule{
rbac.NewRule("get", "list", "watch", "update").Groups(batchGroup).Resources("jobs").RuleOrDie(), rbac.NewRule("get", "list", "watch", "update").Groups(batchGroup).Resources("jobs").RuleOrDie(),
rbac.NewRule("update").Groups(batchGroup).Resources("jobs/status").RuleOrDie(), rbac.NewRule("update").Groups(batchGroup).Resources("jobs/status").RuleOrDie(),
rbac.NewRule("list", "watch", "create", "delete").Groups(legacyGroup).Resources("pods").RuleOrDie(), rbac.NewRule("list", "watch", "create", "delete", "patch").Groups(legacyGroup).Resources("pods").RuleOrDie(),
eventsRule(), eventsRule(),
}, },
}) })
......
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml
View file @ aa7bc258
...@@ -492,6 +492,7 @@ items: ...@@ -492,6 +492,7 @@ items:
- create - create
- delete - delete
- list - list
- patch
- watch - watch
- apiGroups: - apiGroups:
- "" - ""
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment