Skip to content

K
k3s
Unverified Commit 6d3b0612 authored by Jordan Liggitt's avatar Jordan Liggitt
Browse files
Options

Allow the persistent volume binder to watch events

parent c59c11eb
Hide whitespace changes
Inline Side-by-side
Showing with 10 additions and 0 deletions
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/controller_policy.go
View file @ 6d3b0612
...@@ -188,6 +188,9 @@ func init() { ...@@ -188,6 +188,9 @@ func init() {
rbac.NewRule("get", "create", "delete").Groups(legacyGroup).Resources("services", "endpoints").RuleOrDie(), rbac.NewRule("get", "create", "delete").Groups(legacyGroup).Resources("services", "endpoints").RuleOrDie(),
rbac.NewRule("get").Groups(legacyGroup).Resources("secrets").RuleOrDie(), rbac.NewRule("get").Groups(legacyGroup).Resources("secrets").RuleOrDie(),
// recyclerClient.WatchPod
rbac.NewRule("watch").Groups(legacyGroup).Resources("events").RuleOrDie(),
eventsRule(), eventsRule(),
}, },
}) })
......
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml
View file @ 6d3b0612
...@@ -655,6 +655,13 @@ items: ...@@ -655,6 +655,13 @@ items:
resources: resources:
- events - events
verbs: verbs:
- watch
- apiGroups:
- ""
attributeRestrictions: null
resources:
- events
verbs:
- create - create
- patch - patch
- update - update
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment