Commit d23df051 authored by Chen Rong's avatar Chen Rong

update to rbac v1 in yaml file

parent e633a160
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: heapster-binding name: heapster-binding
...@@ -16,7 +16,7 @@ subjects: ...@@ -16,7 +16,7 @@ subjects:
--- ---
# Heapster's pod_nanny monitors the heapster deployment & its pod(s), and scales # Heapster's pod_nanny monitors the heapster deployment & its pod(s), and scales
# the resources of the deployment if necessary. # the resources of the deployment if necessary.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: Role kind: Role
metadata: metadata:
name: system:pod-nanny name: system:pod-nanny
...@@ -39,7 +39,7 @@ rules: ...@@ -39,7 +39,7 @@ rules:
- get - get
- update - update
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
name: heapster-binding name: heapster-binding
......
...@@ -21,7 +21,7 @@ metadata: ...@@ -21,7 +21,7 @@ metadata:
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
--- ---
kind: ClusterRole kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
name: system:kube-dns-autoscaler name: system:kube-dns-autoscaler
labels: labels:
...@@ -43,7 +43,7 @@ rules: ...@@ -43,7 +43,7 @@ rules:
verbs: ["get", "create"] verbs: ["get", "create"]
--- ---
kind: ClusterRoleBinding kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
name: system:kube-dns-autoscaler name: system:kube-dns-autoscaler
labels: labels:
......
...@@ -10,7 +10,7 @@ metadata: ...@@ -10,7 +10,7 @@ metadata:
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
--- ---
kind: ClusterRole kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
name: elasticsearch-logging name: elasticsearch-logging
labels: labels:
...@@ -28,7 +28,7 @@ rules: ...@@ -28,7 +28,7 @@ rules:
- "get" - "get"
--- ---
kind: ClusterRoleBinding kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
namespace: kube-system namespace: kube-system
name: elasticsearch-logging name: elasticsearch-logging
......
...@@ -9,7 +9,7 @@ metadata: ...@@ -9,7 +9,7 @@ metadata:
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
--- ---
kind: ClusterRole kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
name: fluentd-es name: fluentd-es
labels: labels:
...@@ -28,7 +28,7 @@ rules: ...@@ -28,7 +28,7 @@ rules:
- "list" - "list"
--- ---
kind: ClusterRoleBinding kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
name: fluentd-es name: fluentd-es
labels: labels:
......
...@@ -8,7 +8,7 @@ metadata: ...@@ -8,7 +8,7 @@ metadata:
kubernetes.io/cluster-service: "true" kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: event-exporter-rb name: event-exporter-rb
......
...@@ -7,7 +7,7 @@ metadata: ...@@ -7,7 +7,7 @@ metadata:
kubernetes.io/cluster-service: "true" kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: npd-binding name: npd-binding
......
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: npd-binding name: npd-binding
......
# This binding gives the kube-apiserver user full access to the kubelet API # This binding gives the kube-apiserver user full access to the kubelet API
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: kube-apiserver-kubelet-api-admin name: kube-apiserver-kubelet-api-admin
......
# This role allows full access to the kubelet API # This role allows full access to the kubelet API
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: kubelet-api-admin name: kubelet-api-admin
......
...@@ -2,7 +2,7 @@ ...@@ -2,7 +2,7 @@
# identify the system:nodes group. They use the kubelet identity # identify the system:nodes group. They use the kubelet identity
# TODO: remove this once new nodes are granted individual identities and the # TODO: remove this once new nodes are granted individual identities and the
# NodeAuthorizer is enabled. # NodeAuthorizer is enabled.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: kubelet-cluster-admin name: kubelet-cluster-admin
......
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: gce:beta:kubelet-certificate-bootstrap name: gce:beta:kubelet-certificate-bootstrap
...@@ -14,7 +14,7 @@ subjects: ...@@ -14,7 +14,7 @@ subjects:
kind: User kind: User
name: kubelet name: kubelet
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: gce:beta:kubelet-certificate-rotation name: gce:beta:kubelet-certificate-rotation
...@@ -30,7 +30,7 @@ subjects: ...@@ -30,7 +30,7 @@ subjects:
kind: Group kind: Group
name: system:nodes name: system:nodes
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: gce:beta:kubelet-certificate-bootstrap name: gce:beta:kubelet-certificate-bootstrap
...@@ -45,7 +45,7 @@ rules: ...@@ -45,7 +45,7 @@ rules:
verbs: verbs:
- "create" - "create"
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: gce:beta:kubelet-certificate-rotation name: gce:beta:kubelet-certificate-rotation
......
# privilegedPSP gives the privilegedPSP role # privilegedPSP gives the privilegedPSP role
# to the group privileged. # to the group privileged.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: privileged-psp-users name: privileged-psp-users
...@@ -15,7 +15,7 @@ roleRef: ...@@ -15,7 +15,7 @@ roleRef:
--- ---
# restrictedPSP grants the restrictedPSP role to # restrictedPSP grants the restrictedPSP role to
# the groups restricted and privileged. # the groups restricted and privileged.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: restricted-psp-users name: restricted-psp-users
...@@ -33,7 +33,7 @@ roleRef: ...@@ -33,7 +33,7 @@ roleRef:
--- ---
# edit grants edit role to the groups # edit grants edit role to the groups
# restricted and privileged. # restricted and privileged.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: edit name: edit
......
# restrictedPSP grants access to use # restrictedPSP grants access to use
# the restricted PSP. # the restricted PSP.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: restricted-psp-user name: restricted-psp-user
...@@ -16,7 +16,7 @@ rules: ...@@ -16,7 +16,7 @@ rules:
--- ---
# privilegedPSP grants access to use the privileged # privilegedPSP grants access to use the privileged
# PSP. # PSP.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: privileged-psp-user name: privileged-psp-user
......
# This is the role binding for the kubemark heapster. # This is the role binding for the kubemark heapster.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: heapster-view-binding name: heapster-view-binding
......
...@@ -2,7 +2,7 @@ ...@@ -2,7 +2,7 @@
# used for listing hollow-nodes in start-kubemark.sh and # used for listing hollow-nodes in start-kubemark.sh and
# send resource creation requests, etc in run-e2e-tests.sh. # send resource creation requests, etc in run-e2e-tests.sh.
# Also useful if you manually want to use local kubectl. # Also useful if you manually want to use local kubectl.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: kubecfg-cluster-admin name: kubecfg-cluster-admin
......
...@@ -2,7 +2,7 @@ ...@@ -2,7 +2,7 @@
# #
# TODO: give each kubelet a credential in the system:nodes group with username system:node:<nodeName>, # TODO: give each kubelet a credential in the system:nodes group with username system:node:<nodeName>,
# to exercise the Node authorizer and admission, then remove this binding # to exercise the Node authorizer and admission, then remove this binding
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: kubelet-node name: kubelet-node
......
# This is the role binding for the node-problem-detector. # This is the role binding for the node-problem-detector.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: node-problem-detector-binding name: node-problem-detector-binding
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment