Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
k3s
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Registry
Registry
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Jacklull
k3s
Commits
d23df051
Commit
d23df051
authored
Aug 21, 2017
by
Chen Rong
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
update to rbac v1 in yaml file
parent
e633a160
Hide whitespace changes
Inline
Side-by-side
Showing
17 changed files
with
28 additions
and
28 deletions
+28
-28
heapster-rbac.yaml
cluster/addons/cluster-monitoring/heapster-rbac.yaml
+3
-3
dns-horizontal-autoscaler-rbac.yaml
...horizontal-autoscaler/dns-horizontal-autoscaler-rbac.yaml
+2
-2
es-statefulset.yaml
cluster/addons/fluentd-elasticsearch/es-statefulset.yaml
+2
-2
fluentd-es-ds.yaml
cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml
+2
-2
event-exporter.yaml
cluster/addons/fluentd-gcp/event-exporter.yaml
+1
-1
npd.yaml
cluster/addons/node-problem-detector/npd.yaml
+1
-1
npd-binding.yaml
.../addons/node-problem-detector/standalone/npd-binding.yaml
+1
-1
kube-apiserver-kubelet-api-admin-binding.yaml
...addons/rbac/kube-apiserver-kubelet-api-admin-binding.yaml
+1
-1
kubelet-api-admin-role.yaml
cluster/addons/rbac/kubelet-api-admin-role.yaml
+1
-1
kubelet-binding.yaml
cluster/addons/rbac/kubelet-binding.yaml
+1
-1
kubelet-certificate-management.yaml
cluster/addons/rbac/kubelet-certificate-management.yaml
+4
-4
bindings.yaml
examples/podsecuritypolicy/rbac/bindings.yaml
+3
-3
roles.yaml
examples/podsecuritypolicy/rbac/roles.yaml
+2
-2
heapster-binding.yaml
...fests/addons/kubemark-rbac-bindings/heapster-binding.yaml
+1
-1
kubecfg-binding.yaml
...ifests/addons/kubemark-rbac-bindings/kubecfg-binding.yaml
+1
-1
kubelet-binding.yaml
...ifests/addons/kubemark-rbac-bindings/kubelet-binding.yaml
+1
-1
npd-binding.yaml
.../manifests/addons/kubemark-rbac-bindings/npd-binding.yaml
+1
-1
No files found.
cluster/addons/cluster-monitoring/heapster-rbac.yaml
View file @
d23df051
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
heapster-binding
name
:
heapster-binding
...
@@ -16,7 +16,7 @@ subjects:
...
@@ -16,7 +16,7 @@ subjects:
---
---
# Heapster's pod_nanny monitors the heapster deployment & its pod(s), and scales
# Heapster's pod_nanny monitors the heapster deployment & its pod(s), and scales
# the resources of the deployment if necessary.
# the resources of the deployment if necessary.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
Role
kind
:
Role
metadata
:
metadata
:
name
:
system:pod-nanny
name
:
system:pod-nanny
...
@@ -39,7 +39,7 @@ rules:
...
@@ -39,7 +39,7 @@ rules:
-
get
-
get
-
update
-
update
---
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
RoleBinding
kind
:
RoleBinding
metadata
:
metadata
:
name
:
heapster-binding
name
:
heapster-binding
...
...
cluster/addons/dns-horizontal-autoscaler/dns-horizontal-autoscaler-rbac.yaml
View file @
d23df051
...
@@ -21,7 +21,7 @@ metadata:
...
@@ -21,7 +21,7 @@ metadata:
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
kind
:
ClusterRole
kind
:
ClusterRole
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
metadata
:
name
:
system:kube-dns-autoscaler
name
:
system:kube-dns-autoscaler
labels
:
labels
:
...
@@ -43,7 +43,7 @@ rules:
...
@@ -43,7 +43,7 @@ rules:
verbs
:
[
"
get"
,
"
create"
]
verbs
:
[
"
get"
,
"
create"
]
---
---
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
metadata
:
name
:
system:kube-dns-autoscaler
name
:
system:kube-dns-autoscaler
labels
:
labels
:
...
...
cluster/addons/fluentd-elasticsearch/es-statefulset.yaml
View file @
d23df051
...
@@ -10,7 +10,7 @@ metadata:
...
@@ -10,7 +10,7 @@ metadata:
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
kind
:
ClusterRole
kind
:
ClusterRole
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
metadata
:
name
:
elasticsearch-logging
name
:
elasticsearch-logging
labels
:
labels
:
...
@@ -28,7 +28,7 @@ rules:
...
@@ -28,7 +28,7 @@ rules:
-
"
get"
-
"
get"
---
---
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
metadata
:
namespace
:
kube-system
namespace
:
kube-system
name
:
elasticsearch-logging
name
:
elasticsearch-logging
...
...
cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml
View file @
d23df051
...
@@ -9,7 +9,7 @@ metadata:
...
@@ -9,7 +9,7 @@ metadata:
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
kind
:
ClusterRole
kind
:
ClusterRole
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
metadata
:
name
:
fluentd-es
name
:
fluentd-es
labels
:
labels
:
...
@@ -28,7 +28,7 @@ rules:
...
@@ -28,7 +28,7 @@ rules:
-
"
list"
-
"
list"
---
---
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
metadata
:
metadata
:
name
:
fluentd-es
name
:
fluentd-es
labels
:
labels
:
...
...
cluster/addons/fluentd-gcp/event-exporter.yaml
View file @
d23df051
...
@@ -8,7 +8,7 @@ metadata:
...
@@ -8,7 +8,7 @@ metadata:
kubernetes.io/cluster-service
:
"
true"
kubernetes.io/cluster-service
:
"
true"
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
event-exporter-rb
name
:
event-exporter-rb
...
...
cluster/addons/node-problem-detector/npd.yaml
View file @
d23df051
...
@@ -7,7 +7,7 @@ metadata:
...
@@ -7,7 +7,7 @@ metadata:
kubernetes.io/cluster-service
:
"
true"
kubernetes.io/cluster-service
:
"
true"
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
npd-binding
name
:
npd-binding
...
...
cluster/addons/node-problem-detector/standalone/npd-binding.yaml
View file @
d23df051
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
npd-binding
name
:
npd-binding
...
...
cluster/addons/rbac/kube-apiserver-kubelet-api-admin-binding.yaml
View file @
d23df051
# This binding gives the kube-apiserver user full access to the kubelet API
# This binding gives the kube-apiserver user full access to the kubelet API
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
kube-apiserver-kubelet-api-admin
name
:
kube-apiserver-kubelet-api-admin
...
...
cluster/addons/rbac/kubelet-api-admin-role.yaml
View file @
d23df051
# This role allows full access to the kubelet API
# This role allows full access to the kubelet API
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
kind
:
ClusterRole
metadata
:
metadata
:
name
:
kubelet-api-admin
name
:
kubelet-api-admin
...
...
cluster/addons/rbac/kubelet-binding.yaml
View file @
d23df051
...
@@ -2,7 +2,7 @@
...
@@ -2,7 +2,7 @@
# identify the system:nodes group. They use the kubelet identity
# identify the system:nodes group. They use the kubelet identity
# TODO: remove this once new nodes are granted individual identities and the
# TODO: remove this once new nodes are granted individual identities and the
# NodeAuthorizer is enabled.
# NodeAuthorizer is enabled.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
kubelet-cluster-admin
name
:
kubelet-cluster-admin
...
...
cluster/addons/rbac/kubelet-certificate-management.yaml
View file @
d23df051
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
gce:beta:kubelet-certificate-bootstrap
name
:
gce:beta:kubelet-certificate-bootstrap
...
@@ -14,7 +14,7 @@ subjects:
...
@@ -14,7 +14,7 @@ subjects:
kind
:
User
kind
:
User
name
:
kubelet
name
:
kubelet
---
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
gce:beta:kubelet-certificate-rotation
name
:
gce:beta:kubelet-certificate-rotation
...
@@ -30,7 +30,7 @@ subjects:
...
@@ -30,7 +30,7 @@ subjects:
kind
:
Group
kind
:
Group
name
:
system:nodes
name
:
system:nodes
---
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
kind
:
ClusterRole
metadata
:
metadata
:
name
:
gce:beta:kubelet-certificate-bootstrap
name
:
gce:beta:kubelet-certificate-bootstrap
...
@@ -45,7 +45,7 @@ rules:
...
@@ -45,7 +45,7 @@ rules:
verbs
:
verbs
:
-
"
create"
-
"
create"
---
---
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
kind
:
ClusterRole
metadata
:
metadata
:
name
:
gce:beta:kubelet-certificate-rotation
name
:
gce:beta:kubelet-certificate-rotation
...
...
examples/podsecuritypolicy/rbac/bindings.yaml
View file @
d23df051
# privilegedPSP gives the privilegedPSP role
# privilegedPSP gives the privilegedPSP role
# to the group privileged.
# to the group privileged.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
privileged-psp-users
name
:
privileged-psp-users
...
@@ -15,7 +15,7 @@ roleRef:
...
@@ -15,7 +15,7 @@ roleRef:
---
---
# restrictedPSP grants the restrictedPSP role to
# restrictedPSP grants the restrictedPSP role to
# the groups restricted and privileged.
# the groups restricted and privileged.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
restricted-psp-users
name
:
restricted-psp-users
...
@@ -33,7 +33,7 @@ roleRef:
...
@@ -33,7 +33,7 @@ roleRef:
---
---
# edit grants edit role to the groups
# edit grants edit role to the groups
# restricted and privileged.
# restricted and privileged.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
edit
name
:
edit
...
...
examples/podsecuritypolicy/rbac/roles.yaml
View file @
d23df051
# restrictedPSP grants access to use
# restrictedPSP grants access to use
# the restricted PSP.
# the restricted PSP.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
kind
:
ClusterRole
metadata
:
metadata
:
name
:
restricted-psp-user
name
:
restricted-psp-user
...
@@ -16,7 +16,7 @@ rules:
...
@@ -16,7 +16,7 @@ rules:
---
---
# privilegedPSP grants access to use the privileged
# privilegedPSP grants access to use the privileged
# PSP.
# PSP.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRole
kind
:
ClusterRole
metadata
:
metadata
:
name
:
privileged-psp-user
name
:
privileged-psp-user
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/heapster-binding.yaml
View file @
d23df051
# This is the role binding for the kubemark heapster.
# This is the role binding for the kubemark heapster.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
heapster-view-binding
name
:
heapster-view-binding
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/kubecfg-binding.yaml
View file @
d23df051
...
@@ -2,7 +2,7 @@
...
@@ -2,7 +2,7 @@
# used for listing hollow-nodes in start-kubemark.sh and
# used for listing hollow-nodes in start-kubemark.sh and
# send resource creation requests, etc in run-e2e-tests.sh.
# send resource creation requests, etc in run-e2e-tests.sh.
# Also useful if you manually want to use local kubectl.
# Also useful if you manually want to use local kubectl.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
kubecfg-cluster-admin
name
:
kubecfg-cluster-admin
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/kubelet-binding.yaml
View file @
d23df051
...
@@ -2,7 +2,7 @@
...
@@ -2,7 +2,7 @@
#
#
# TODO: give each kubelet a credential in the system:nodes group with username system:node:<nodeName>,
# TODO: give each kubelet a credential in the system:nodes group with username system:node:<nodeName>,
# to exercise the Node authorizer and admission, then remove this binding
# to exercise the Node authorizer and admission, then remove this binding
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
kubelet-node
name
:
kubelet-node
...
...
test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/npd-binding.yaml
View file @
d23df051
# This is the role binding for the node-problem-detector.
# This is the role binding for the node-problem-detector.
apiVersion
:
rbac.authorization.k8s.io/v1
beta1
apiVersion
:
rbac.authorization.k8s.io/v1
kind
:
ClusterRoleBinding
kind
:
ClusterRoleBinding
metadata
:
metadata
:
name
:
node-problem-detector-binding
name
:
node-problem-detector-binding
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment