Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
k3s
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Registry
Registry
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Jacklull
k3s
Commits
d23df051
Commit
d23df051
authored
Aug 21, 2017
by
Chen Rong
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
update to rbac v1 in yaml file
parent
e633a160
Hide whitespace changes
Inline
Side-by-side
Showing
17 changed files
with
28 additions
and
28 deletions
+28
-28
heapster-rbac.yaml
cluster/addons/cluster-monitoring/heapster-rbac.yaml
+3
-3
dns-horizontal-autoscaler-rbac.yaml
...horizontal-autoscaler/dns-horizontal-autoscaler-rbac.yaml
+2
-2
es-statefulset.yaml
cluster/addons/fluentd-elasticsearch/es-statefulset.yaml
+2
-2
fluentd-es-ds.yaml
cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml
+2
-2
event-exporter.yaml
cluster/addons/fluentd-gcp/event-exporter.yaml
+1
-1
npd.yaml
cluster/addons/node-problem-detector/npd.yaml
+1
-1
npd-binding.yaml
.../addons/node-problem-detector/standalone/npd-binding.yaml
+1
-1
kube-apiserver-kubelet-api-admin-binding.yaml
...addons/rbac/kube-apiserver-kubelet-api-admin-binding.yaml
+1
-1
kubelet-api-admin-role.yaml
cluster/addons/rbac/kubelet-api-admin-role.yaml
+1
-1
kubelet-binding.yaml
cluster/addons/rbac/kubelet-binding.yaml
+1
-1
kubelet-certificate-management.yaml
cluster/addons/rbac/kubelet-certificate-management.yaml
+4
-4
bindings.yaml
examples/podsecuritypolicy/rbac/bindings.yaml
+3
-3
roles.yaml
examples/podsecuritypolicy/rbac/roles.yaml
+2
-2
heapster-binding.yaml
...fests/addons/kubemark-rbac-bindings/heapster-binding.yaml
+1
-1
kubecfg-binding.yaml
...ifests/addons/kubemark-rbac-bindings/kubecfg-binding.yaml
+1
-1
kubelet-binding.yaml
...ifests/addons/kubemark-rbac-bindings/kubelet-binding.yaml
+1
-1
npd-binding.yaml
.../manifests/addons/kubemark-rbac-bindings/npd-binding.yaml
+1
-1
No files found.
cluster/addons/cluster-monitoring/heapster-rbac.yaml
View file @
d23df051
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
heapster-binding
...
...
@@ -16,7 +16,7 @@ subjects:
---
# Heapster's pod_nanny monitors the heapster deployment & its pod(s), and scales
# the resources of the deployment if necessary.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
Role
metadata
:
name
:
system:pod-nanny
...
...
@@ -39,7 +39,7 @@ rules:
-
get
-
update
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
RoleBinding
metadata
:
name
:
heapster-binding
...
...
cluster/addons/dns-horizontal-autoscaler/dns-horizontal-autoscaler-rbac.yaml
View file @
d23df051
...
...
@@ -21,7 +21,7 @@ metadata:
addonmanager.kubernetes.io/mode
:
Reconcile
---
kind
:
ClusterRole
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
name
:
system:kube-dns-autoscaler
labels
:
...
...
@@ -43,7 +43,7 @@ rules:
verbs
:
[
"
get"
,
"
create"
]
---
kind
:
ClusterRoleBinding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
name
:
system:kube-dns-autoscaler
labels
:
...
...
cluster/addons/fluentd-elasticsearch/es-statefulset.yaml
View file @
d23df051
...
...
@@ -10,7 +10,7 @@ metadata:
addonmanager.kubernetes.io/mode
:
Reconcile
---
kind
:
ClusterRole
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
name
:
elasticsearch-logging
labels
:
...
...
@@ -28,7 +28,7 @@ rules:
-
"
get"
---
kind
:
ClusterRoleBinding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
namespace
:
kube-system
name
:
elasticsearch-logging
...
...
cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml
View file @
d23df051
...
...
@@ -9,7 +9,7 @@ metadata:
addonmanager.kubernetes.io/mode
:
Reconcile
---
kind
:
ClusterRole
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
name
:
fluentd-es
labels
:
...
...
@@ -28,7 +28,7 @@ rules:
-
"
list"
---
kind
:
ClusterRoleBinding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
name
:
fluentd-es
labels
:
...
...
cluster/addons/fluentd-gcp/event-exporter.yaml
View file @
d23df051
...
...
@@ -8,7 +8,7 @@ metadata:
kubernetes.io/cluster-service
:
"
true"
addonmanager.kubernetes.io/mode
:
Reconcile
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
event-exporter-rb
...
...
cluster/addons/node-problem-detector/npd.yaml
View file @
d23df051
...
...
@@ -7,7 +7,7 @@ metadata:
kubernetes.io/cluster-service
:
"
true"
addonmanager.kubernetes.io/mode
:
Reconcile
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
npd-binding
...
...
cluster/addons/node-problem-detector/standalone/npd-binding.yaml
View file @
d23df051
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
npd-binding
...
...
cluster/addons/rbac/kube-apiserver-kubelet-api-admin-binding.yaml
View file @
d23df051
# This binding gives the kube-apiserver user full access to the kubelet API
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
kube-apiserver-kubelet-api-admin
...
...
cluster/addons/rbac/kubelet-api-admin-role.yaml
View file @
d23df051
# This role allows full access to the kubelet API
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
metadata
:
name
:
kubelet-api-admin
...
...
cluster/addons/rbac/kubelet-binding.yaml
View file @
d23df051
...
...
@@ -2,7 +2,7 @@
# identify the system:nodes group. They use the kubelet identity
# TODO: remove this once new nodes are granted individual identities and the
# NodeAuthorizer is enabled.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
kubelet-cluster-admin
...
...
cluster/addons/rbac/kubelet-certificate-management.yaml
View file @
d23df051
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
gce:beta:kubelet-certificate-bootstrap
...
...
@@ -14,7 +14,7 @@ subjects:
kind
:
User
name
:
kubelet
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
gce:beta:kubelet-certificate-rotation
...
...
@@ -30,7 +30,7 @@ subjects:
kind
:
Group
name
:
system:nodes
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
metadata
:
name
:
gce:beta:kubelet-certificate-bootstrap
...
...
@@ -45,7 +45,7 @@ rules:
verbs
:
-
"
create"
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
metadata
:
name
:
gce:beta:kubelet-certificate-rotation
...
...
examples/podsecuritypolicy/rbac/bindings.yaml
View file @
d23df051
# privilegedPSP gives the privilegedPSP role
# to the group privileged.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
privileged-psp-users
...
...
@@ -15,7 +15,7 @@ roleRef:
---
# restrictedPSP grants the restrictedPSP role to
# the groups restricted and privileged.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
restricted-psp-users
...
...
@@ -33,7 +33,7 @@ roleRef:
---
# edit grants edit role to the groups
# restricted and privileged.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
edit
...
...
examples/podsecuritypolicy/rbac/roles.yaml
View file @
d23df051
# restrictedPSP grants access to use
# the restricted PSP.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
metadata
:
name
:
restricted-psp-user
...
...
@@ -16,7 +16,7 @@ rules:
---
# privilegedPSP grants access to use the privileged
# PSP.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
metadata
:
name
:
privileged-psp-user
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/heapster-binding.yaml
View file @
d23df051
# This is the role binding for the kubemark heapster.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
heapster-view-binding
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/kubecfg-binding.yaml
View file @
d23df051
...
...
@@ -2,7 +2,7 @@
# used for listing hollow-nodes in start-kubemark.sh and
# send resource creation requests, etc in run-e2e-tests.sh.
# Also useful if you manually want to use local kubectl.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
kubecfg-cluster-admin
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/kubelet-binding.yaml
View file @
d23df051
...
...
@@ -2,7 +2,7 @@
#
# TODO: give each kubelet a credential in the system:nodes group with username system:node:<nodeName>,
# to exercise the Node authorizer and admission, then remove this binding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
kubelet-node
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/npd-binding.yaml
View file @
d23df051
# This is the role binding for the node-problem-detector.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
metadata
:
name
:
node-problem-detector-binding
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment