github/kured
1
0
Fork 0
mirror of https://github.com/kubereboot/kured.git synced 2026-08-23 21:36:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update RBAC permissions for kubectl v1.10.3

Browse Source
This commit is contained in:
Adam Harrison
2018-06-05 17:20:57 +01:00
parent bc3f28d112
commit 908998a70b
1 changed files with 3 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kured-rbac.yaml
+3 -12
View File
@@ -8,25 +8,16 @@ rules:
# Allow kubectl to drain/uncordon # Allow kubectl to drain/uncordon
# #
# NB: These permissions are tightly coupled to the bundled version of kubectl; the ones below # NB: These permissions are tightly coupled to the bundled version of kubectl; the ones below
# match https://github.com/kubernetes/kubernetes/blob/v1.9.6/pkg/kubectl/cmd/drain.go # match https://github.com/kubernetes/kubernetes/blob/v1.10.3/pkg/kubectl/cmd/drain.go
# #
- apiGroups: [""] - apiGroups: [""]
resources: ["nodes"] resources: ["nodes"]
verbs: ["get", "patch"] verbs: ["get", "patch"]
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods"]
verbs: ["list"] verbs: ["list","delete","get"]
- apiGroups: [""]
resources: ["replicationcontrollers"]
verbs: ["get"]
- apiGroups: ["apps"]
resources: ["statefulsets"]
verbs: ["get"]
- apiGroups: ["extensions"] - apiGroups: ["extensions"]
resources: ["daemonsets", "replicasets"] resources: ["daemonsets"]
verbs: ["get"]
- apiGroups: ["batch"]
resources: ["jobs"]
verbs: ["get"] verbs: ["get"]
- apiGroups: [""] - apiGroups: [""]
resources: ["pods/eviction"] resources: ["pods/eviction"]