Merge pull request #46489 from xilabao/de-duplication-of-verb

Automatic merge from submit-queue (batch tested with PRs 46489, 46281, 46463, 46114, 43946) De-duplication of verb in policy.go **What this PR does / why we need it**: https://github.com/kubernetes/kubernetes/blob/master/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go#L224 contains `get` verb. **Which issue this PR fixes**: **Special notes for your reviewer**: **Release note**: ```release-note None ```

Merge pull request #46489 from xilabao/de-duplication-of-verb
61693bf6 · Kubernetes Submit Queue · GitHub · 657c01c6 · 35acfdea · 61693bf6
Commit 61693bf6 authored May 30, 2017 by Kubernetes Submit Queue Committed by GitHub May 30, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 2 deletions

policy.go plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go +1 -1

cluster-roles.yaml ...thorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml +0 -1

No files found.
--- a/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
+++ b/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
@@ -226,7 +226,7 @@ func ClusterRoles() []rbac.ClusterRole {
 				// TODO: remove once mirror pods are removed
 				// TODO: restrict deletion to mirror pods created by the bound node once supported
 				// Needed for the node to create/delete mirror pods
-				rbac.NewRule("get", "create", "delete").Groups(legacyGroup).Resources("pods").RuleOrDie(),
+				rbac.NewRule("create", "delete").Groups(legacyGroup).Resources("pods").RuleOrDie(),
 				// TODO: restrict to pods scheduled on the bound node once supported
 				rbac.NewRule("update").Groups(legacyGroup).Resources("pods/status").RuleOrDie(),

--- a/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml
+++ b/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml
@@ -672,7 +672,6 @@ items:
    verbs:
    - create
    - delete
-    - get
  - apiGroups:
    - ""
    resources: