Skip to content

K
k3s
Commit ec532389 authored by Brendan Burns's avatar Brendan Burns
Browse files
Options

Add '/version/*' to the system:discovery role, since that's what the open

api spec says.
parent cdbfff07
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 1 deletion
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View file @ ec532389
...@@ -169,7 +169,7 @@ func ClusterRoles() []rbac.ClusterRole { ...@@ -169,7 +169,7 @@ func ClusterRoles() []rbac.ClusterRole {
ObjectMeta: metav1.ObjectMeta{Name: "system:discovery"}, ObjectMeta: metav1.ObjectMeta{Name: "system:discovery"},
Rules: []rbac.PolicyRule{ Rules: []rbac.PolicyRule{
rbac.NewRule("get").URLs( rbac.NewRule("get").URLs(
"/healthz", "/version", "/healthz", "/version", "/version/*",
// remove once swagger 1.2 support is removed // remove once swagger 1.2 support is removed
"/swaggerapi", "/swaggerapi/*", "/swaggerapi", "/swaggerapi/*",
// do not expand this pattern for openapi discovery docs // do not expand this pattern for openapi discovery docs
......
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml
View file @ ec532389
...@@ -640,6 +640,7 @@ items: ...@@ -640,6 +640,7 @@ items:
- /swaggerapi - /swaggerapi
- /swaggerapi/* - /swaggerapi/*
- /version - /version
- /version/*
verbs: verbs:
- get - get
- apiVersion: rbac.authorization.k8s.io/v1 - apiVersion: rbac.authorization.k8s.io/v1
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment