• Kubernetes Submit Queue's avatar
    Merge pull request #56650 from danwinship/networkpolicy-rbac · 7f87337b
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    Add RBAC policies for NetworkPolicy
    
    **What this PR does / why we need it**:
    When using RBAC, none of the namespace-level roles currently have permission to do anything with NetworkPolicy. (Only cluster-admin does, by virtue of having permission on "*".) This fixes it so "admin" and "edit" have read/write permission, and "view" has read-only permission.
    
    I added permission for both the extensions and networking objects, which I believe is correct as long as both of them exist?
    
    (This would be nice to fix in 1.9, although it's not a regression. It's always been broken.)
    
    **Release note**:
    ```release-note
    When using Role-Based Access Control, the "admin", "edit", and "view" roles now have the expected permissions on NetworkPolicy resources.
    ```
    7f87337b
Name
Last commit
Last update
..
admission Loading commit data...
auth Loading commit data...
scheduler Loading commit data...