Skip to content

K
k3s
Commit 0c59d4db authored by Tim Allclair's avatar Tim Allclair
Browse files
Options

Add RuntimeClass read permission for nodes

parent eff30a31
Hide whitespace changes
Inline Side-by-side
Showing with 5 additions and 0 deletions
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View file @ 0c59d4db
...@@ -165,6 +165,11 @@ func NodeRules() []rbacv1.PolicyRule { ...@@ -165,6 +165,11 @@ func NodeRules() []rbacv1.PolicyRule {
if utilfeature.DefaultFeatureGate.Enabled(features.NodeLease) { if utilfeature.DefaultFeatureGate.Enabled(features.NodeLease) {
nodePolicyRules = append(nodePolicyRules, rbacv1helpers.NewRule("get", "create", "update", "patch", "delete").Groups("coordination.k8s.io").Resources("leases").RuleOrDie()) nodePolicyRules = append(nodePolicyRules, rbacv1helpers.NewRule("get", "create", "update", "patch", "delete").Groups("coordination.k8s.io").Resources("leases").RuleOrDie())
} }
// RuntimeClass
if utilfeature.DefaultFeatureGate.Enabled(features.RuntimeClass) {
nodePolicyRules = append(nodePolicyRules, rbacv1helpers.NewRule("get", "list", "watch").Groups("node.k8s.io").Resources("runtimeclasses").RuleOrDie())
}
return nodePolicyRules return nodePolicyRules
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment