From c27bb3929b9bc1d84981a7732cf9b605a300b569 Mon Sep 17 00:00:00 2001 From: Christian Ihle Date: Thu, 6 Jun 2019 11:54:14 +0200 Subject: [PATCH] Split permissions for apps and extensions apigroups since statefulsets does not have extensions --- .../chart/reloader/templates/clusterrole.yaml | 13 +++++++++++-- .../chart/reloader/templates/role.yaml | 13 +++++++++++-- .../kubernetes/manifests/clusterrole.yaml | 13 +++++++++++-- deployments/kubernetes/reloader.yaml | 17 +++++++++++++---- 4 files changed, 46 insertions(+), 10 deletions(-) diff --git a/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml b/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml index 04c159f5..770f33c2 100644 --- a/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml +++ b/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml @@ -15,7 +15,7 @@ metadata: rules: - apiGroups: - "" - resources: + resources: - secrets - configmaps verbs: @@ -23,7 +23,6 @@ rules: - get - watch - apiGroups: - - "extensions" - "apps" resources: - deployments @@ -34,4 +33,14 @@ rules: - get - update - patch + - apiGroups: + - "extensions" + resources: + - deployments + - daemonsets + verbs: + - list + - get + - update + - patch {{- end }} diff --git a/deployments/kubernetes/chart/reloader/templates/role.yaml b/deployments/kubernetes/chart/reloader/templates/role.yaml index 21c049bc..dd5dac54 100644 --- a/deployments/kubernetes/chart/reloader/templates/role.yaml +++ b/deployments/kubernetes/chart/reloader/templates/role.yaml @@ -15,7 +15,7 @@ metadata: rules: - apiGroups: - "" - resources: + resources: - secrets - configmaps verbs: @@ -23,7 +23,6 @@ rules: - get - watch - apiGroups: - - "extensions" - "apps" resources: - deployments @@ -34,4 +33,14 @@ rules: - get - update - patch + - apiGroups: + - "extensions" + resources: + - deployments + - daemonsets + verbs: + - list + - get + - update + - patch {{- end }} diff --git a/deployments/kubernetes/manifests/clusterrole.yaml b/deployments/kubernetes/manifests/clusterrole.yaml index ed2412dd..94b6bd12 100644 --- a/deployments/kubernetes/manifests/clusterrole.yaml +++ b/deployments/kubernetes/manifests/clusterrole.yaml @@ -14,7 +14,7 @@ metadata: rules: - apiGroups: - "" - resources: + resources: - secrets - configmaps verbs: @@ -22,7 +22,6 @@ rules: - get - watch - apiGroups: - - "extensions" - "apps" resources: - deployments @@ -33,4 +32,14 @@ rules: - get - update - patch + - apiGroups: + - "extensions" + resources: + - deployments + - daemonsets + verbs: + - list + - get + - update + - patch diff --git a/deployments/kubernetes/reloader.yaml b/deployments/kubernetes/reloader.yaml index edd0fdc7..8e1f7aae 100644 --- a/deployments/kubernetes/reloader.yaml +++ b/deployments/kubernetes/reloader.yaml @@ -15,7 +15,7 @@ metadata: group: com.stakater.platform provider: stakater version: v0.0.29 - + name: reloader spec: replicas: 1 @@ -34,7 +34,7 @@ spec: group: com.stakater.platform provider: stakater version: v0.0.29 - + spec: containers: - env: @@ -59,7 +59,7 @@ metadata: rules: - apiGroups: - "" - resources: + resources: - secrets - configmaps verbs: @@ -67,7 +67,6 @@ rules: - get - watch - apiGroups: - - "extensions" - "apps" resources: - deployments @@ -78,6 +77,16 @@ rules: - get - update - patch + - apiGroups: + - "extensions" + resources: + - deployments + - daemonsets + verbs: + - list + - get + - update + - patch --- # Source: reloader/templates/rolebinding.yaml