Skip to content

K
k3s
Commit 85165b40 authored by Jordan Liggitt's avatar Jordan Liggitt
Browse files
Options

Update RBAC roles for networking.k8s.io ingresses

parent 4938cc37
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 2 deletions
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View file @ 85165b40
...@@ -284,7 +284,7 @@ func ClusterRoles() []rbacv1.ClusterRole { ...@@ -284,7 +284,7 @@ func ClusterRoles() []rbacv1.ClusterRole {
rbacv1helpers.NewRule(Write...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(), rbacv1helpers.NewRule(Write...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(),
rbacv1helpers.NewRule(Write...).Groups(networkingGroup).Resources("networkpolicies").RuleOrDie(), rbacv1helpers.NewRule(Write...).Groups(networkingGroup).Resources("networkpolicies", "ingresses").RuleOrDie(),
}, },
}, },
{ {
...@@ -317,7 +317,7 @@ func ClusterRoles() []rbacv1.ClusterRole { ...@@ -317,7 +317,7 @@ func ClusterRoles() []rbacv1.ClusterRole {
rbacv1helpers.NewRule(Read...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(), rbacv1helpers.NewRule(Read...).Groups(policyGroup).Resources("poddisruptionbudgets").RuleOrDie(),
rbacv1helpers.NewRule(Read...).Groups(networkingGroup).Resources("networkpolicies").RuleOrDie(), rbacv1helpers.NewRule(Read...).Groups(networkingGroup).Resources("networkpolicies", "ingresses").RuleOrDie(),
}, },
}, },
{ {
......
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml
View file @ 85165b40
...@@ -211,6 +211,7 @@ items: ...@@ -211,6 +211,7 @@ items:
- apiGroups: - apiGroups:
- networking.k8s.io - networking.k8s.io
resources: resources:
- ingresses
- networkpolicies - networkpolicies
verbs: verbs:
- create - create
...@@ -326,6 +327,7 @@ items: ...@@ -326,6 +327,7 @@ items:
- apiGroups: - apiGroups:
- networking.k8s.io - networking.k8s.io
resources: resources:
- ingresses
- networkpolicies - networkpolicies
verbs: verbs:
- get - get
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment