From 58e895ed5dc65c7eef732b23fbd9e0135e65868d Mon Sep 17 00:00:00 2001 From: Eugenio Marzo Date: Sun, 10 May 2020 19:31:16 +0200 Subject: [PATCH] fix roles --- README.md | 27 +----------------- helm-charts/kubeinvaders-0.2.8.tar.gz | Bin 0 -> 3552 bytes helm-charts/kubeinvaders/index.yaml | 3 ++ .../kubeinvaders/templates/rbac-role.yaml | 3 ++ 4 files changed, 7 insertions(+), 26 deletions(-) create mode 100644 helm-charts/kubeinvaders-0.2.8.tar.gz create mode 100755 helm-charts/kubeinvaders/index.yaml diff --git a/README.md b/README.md index 2e8f76b..b0b942e 100644 --- a/README.md +++ b/README.md @@ -70,7 +70,7 @@ helm install --set-string target_namespace="namespace1\,namespace2" --name kubei To Install KubeInvaders on your Openshift Cluster clone this repo and launch the following commands: ```bash -oc create clusterrole kubeinvaders-role --verb=watch,get,delete,list --resource=pods +oc create clusterrole kubeinvaders-role --verb=watch,get,delete,list --resource=pods,pods/log TARGET_NAMESPACE=foobar,awesome-namespace ## You can define multiple namespaces ex: TARGET_NAMESPACE=foobar,foobar2 @@ -94,28 +94,3 @@ oc process -f openshift/KubeInvaders.yaml -p ROUTE_HOST=$ROUTE_HOST -p TARGET_NA ### How the configuration of KubeInvaders DeploymentConfig should be (remember to use your TARGET_NAMESPACE and ROUTE_HOST) ![Alt Text](https://github.com/lucky-sideburn/KubeInvaders/blob/master/images/dcenv.png) - -### Install KubeInvaders on Kubernetes - -```bash -#Change with the namespace you want to stress -TARGET_NAMESPACE='foobar' -## You can define multiple namespaces ex: TARGET_NAMESPACE=foobar,foobar2 - -#Change with the URL of your Kubeinvaders -ROUTE_HOST=kubeinvaders.org - -kubectl apply -f kubernetes/kubeinvaders-namespace.yml -kubectl apply -f kubernetes/kubeinvaders-deployment.yml -n kubeinvaders -kubectl expose deployment kubeinvaders --type=NodePort --name=kubeinvaders -n kubeinvaders --port 8080 -kubectl apply -f kubernetes/kubeinvaders-ingress.yml -n kubeinvaders -kubectl create sa kubeinvaders -n foobar -kubectl apply -f kubernetes/kubeinvaders-role.yml -kubectl apply -f kubernetes/kubeinvaders-rolebinding.yml - -TOKEN=`kubectl describe secret $(kubectl get secret -n foobar | grep 'kubeinvaders-token' | awk '{ print $1}') -n foobar | grep 'token:' | awk '{ print $2}'` - -kubectl set env deployment/kubeinvaders TOKEN=$TOKEN -n kubeinvaders -kubectl set env deployment/kubeinvaders NAMESPACE=$TARGET_NAMESPACE -n kubeinvaders -kubectl set env deployment/kubeinvaders ROUTE_HOST=$ROUTE_HOST -n kubeinvaders -``` diff --git a/helm-charts/kubeinvaders-0.2.8.tar.gz b/helm-charts/kubeinvaders-0.2.8.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..67604b47998d06f2a21fc398c10ddc78336757c4 GIT binary patch literal 3552 zcmV<64IlC!iwFocL=av818a3+Wod49VPs`;b1rmYascfdYjfK+vY+`YaEv={a}o8l zoY9PDF13BFCW)=F-SjfKjE5p22{A>m1Snf|bHDv|0lp<#vTG|%E40xA0v3yX?*jBy zG^EU**)9!5{hOz0jYeaCZ;z<=u6}Q{I{H0sq}lE^I*m@N(cUMGW~bfW`-bd25k7?$ z32BFb3XR6pXS{M83>%H^fD`W{eg8_@Ri6Kc6FZdF+@5-mx(3jr+v!yEztd?0|M$Ah zb`wPa_}^`H+uxAJqhe9f{^tC*1NIJB&$!xv;e;%Z>iaA56ZNLVL8%}k9+KA} zEd5wm4Bwv89?8p(VFy79tYNjRm&Ppn+O!(RgyWovl!55g>tiM-(a>`EwC+XD)x0K{ zONUYD*9!|7f=8i4MbD_+ck0w;zJ!198E0#hixUh&C=B!B{-pa~W9-BQj4#ciCv64& zXFf=|=UHO%sB5g!|5l@`^}p3^bh}N||8}Rd)&EVj32L}Yy@Dc>S}lmeF*Ve$u~a~( zpt2@p$ow$@qK&D%M2!-G?a%`=58%HqMx1jKrr>}w>~s>rQN%L-+A8*^ZUz0fkl$?V z^N>E~8mshwueG56dyVE+|2NT|k%28G4Shi*Cz|)xtgF|gV=}JeOY&9B{CWmx2>XiyGGZPT#&b(t2k<(yui#Zq;q(7s=sP=PJQAdT zbPNjyA^$`jX;=^}*mXS)x(sV39PZNkS7gr$`Y-7;0Orw0&IIp~|A7h6{=ePa=6{=L z1^&-$F9JP(>;!Oy{cp9J9cBObJFO-pgUbH5x?B6diS~>f(UBc_l4$0uJTEU4snv)7 zZSwxr+cz~BGDQpRDw~M|j;Q0=;5cSrChZ~EQFJClG~`0SFi65UnL`#wQVRn?Uq}Ow zIrbrseAy#S!(dZzGd)Pi;1@0!nEQDtE2|gMO#)Hq7)BsG3EzUq^9CGX!nFSAgv&ul z1@)z&a@AAFMMHqoBc^GLVCX`pA!s;bjzU4s1L!>TKs;#JA0Tvac|G#7@v;G!`eOhs za3J+@!)}krFrx6?_I)mui&H-n;*XhsW5qKp+(774qyXb}A-q~h!Ha=60Td8~36myV z$ar>5eJSSImd732Q$G{sWkrvCFze<=0}=PqnSweYl_x6cRY`n}-q=8YT7yCH^xRT< zQej}c67niZ!pZGt82ya=LP;bd$P4DcE=ZH7)OQJN9XT%o>afuq@(L|l>1+%FaDYc` z2oNNSm5pNM0JR)+unM#@;Y=k5ATJYKhK81wLE94$r1-EcTL3h`)pzteh9hC*L-+t3 znX!=jfDrVl;KE~4dQ`zqQF#Gjj5ERI-!h*ec`Xnclv3hya&7yCo#duPzTT}=$c?z? z@oV6&f{wuo46)r$AUF8?6c_L*OcZuFS3wZKnsT*!N}MPJ`VB){(PjjqMs_n&?^-d? zDbqZ91{`vN2$ZGKn8x3y01fq|*?Rew#asLp6nWhlh7S?TIrTsSd8oK6xktlTg2@LE zs*p#LURKIsITZv!hP-ZQho&(B#1;Ce-?qo74{_2BcHsJZMijW9ypo}WHou~%>95l& z;y)K`GoPcBKSDIH!vDAT!x0QrgdX@#2g&*9MXw?f zBdS(ZiSL^nUG71dhwL%Y-FWpJ$FO+?MDB&k!w8hO;92q|kU0rRde&cM z)f&0bJ6k3nk3VFkJNZ&IcC(pI_;ZK0of|#y^z3y6ryyoQD!9L;znExL7~GDq3w?;*-;+4 zcd#&8l^(RbW}_`t&(OVSNiZrLk)85f>ERdwziJ`x)$8zCEoH?K0UGfPdaMiOj~;9b z;K!C(5c34A2byOyMK>-ASy&O$@aPR%I&yM)bbL8DJ-ayA`3}{{ksg6KqHw@j4v&)f zg48(qB)E^eJuq)A43{kBO+GX}D#M0Id^SnEx~LA1lTwzBkiReC*B_LyL)hX$I5IE~ z3O!H-8G%7`UE~E-eesvirb57(aK$}f%TA0&ZzrW!1?k^#+x@}zFs=;mB0n@VPd(C? z5M|Gaw68#T$%tN)Df1yF6lv)w50dl;aaGcu*~~*pwel|MJ&%ZE`{Wt}cQsq@lkibq z6?X5D}9e!CsDfiRK}%S@3yxfz27R z`H(B&p4v~P(xqkAHMDMUdUT0_eTgIich{9_kC@BTpMy$rWu$shoeUi;$%V{HB}y_h z1v{rU<~s(#YeLp$Yu{?Xf6X37izvSl5KooTbLJX@*@PHKB&^V1+o4N#5^AYn6JQwS zxS+!S>kQ_Rj)GR7|F?_he=P_D_O||i6HV88&K0|j(q+JW5usG!SyCy8%Qy@Dq1K4% zQo)3VOsZV2q7HLsUYsjCSE>B6Q<>5^j9#o}I}X-!tR=+|eIRt_v>2x^&C+|d3jI&w ztWD^Dv)gTyOy*9++eX{5sPOR5=JQ6hH$REy6)?x=ofE3c0m7tH^% zv!B9IQt^CwZF1k2Y+qU;w{4TH!u~tDA{TP+5q!YP`cHiSH?#lEz5T8I-$={b{}2LO z%Z}uPhwL|%pjcNgmBmOsLtLpn1G%`jcc`uzff-6fZ-o!|Q;ZXH}(KcTYQ=Jds2agHW;ld)4!q_j(%ZIeP*j+s8VV?7gx_PsQY*JQA;05O zHNHc-ZS|2&&!f?Z-4L^u0mH%=e%44Hh7_X+J6!`$y65EA$oANXQ5VgPLf05i$& zEu%k5?3MzTo#!WH$yJEU4?Cq}DhI4Z zcRa>VzU-(y^bXc%Z4S?r92!c|tf#mZdhd;35Heqmi21FkeJjioG`;S9gstjxK?rl) zMa7B#77B7!aX1ziJxY1RRa}mv;i^65Nv=P~t{wJ+*VXYf)cmJO%uDlLoBh%@YTKT! zt5%m_0lRSQYi;I%()@qG-6d*mu6diZRuUU?&4Z#fZeM;K=SOQ)Nfe1h3LK6Il1If zqU$l0@qtkM(99JL7x#J@R1}hwgq%o=*wKqDP=NPnJ7w=kCTuP*4b&JPLI} aA#B}7fZMih+qP|gx%Ph(Kvq%!S^xmdkMr#S literal 0 HcmV?d00001 diff --git a/helm-charts/kubeinvaders/index.yaml b/helm-charts/kubeinvaders/index.yaml new file mode 100755 index 0000000..f44cc7f --- /dev/null +++ b/helm-charts/kubeinvaders/index.yaml @@ -0,0 +1,3 @@ +apiVersion: v1 +entries: {} +generated: 2020-01-04T08:53:44.106913+01:00 diff --git a/helm-charts/kubeinvaders/templates/rbac-role.yaml b/helm-charts/kubeinvaders/templates/rbac-role.yaml index 81f72d9..d3ba271 100644 --- a/helm-charts/kubeinvaders/templates/rbac-role.yaml +++ b/helm-charts/kubeinvaders/templates/rbac-role.yaml @@ -14,6 +14,9 @@ rules: - apiGroups: [""] resources: ["pods"] verbs: ["get", "watch", "list", "delete"] +- apiGroups: [""] + resources: ["pods/log"] + verbs: ["get", "watch", "list"] --- kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1