• Kubernetes Submit Queue's avatar
    Merge pull request #40042 from seh/add-ingress-to-rbac-roles · c14fa94a
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue
    
    Include "ingresses" resource in RBAC bootstrap roles
    
    The bootstrap RBAC roles "admin", "edit", and "view" should all be able to apply their respective access verbs to the "ingresses" resource in order to facilitate both publishing Ingress resources (for
    service administrators) and consuming them (for ingress controllers).
    
    Note that I alphabetized the resources listed in the role definitions that I changed to make it easier to decide later where to insert new entries. The original order looked like it may have started out alphabetized, but lost its way. If I missed an intended order there, please advise.
    
    I am uncertain whether this change deserves mention in a release note, given the RBAC feature's alpha state. Regardless, it's possible that a cluster administrator could have been happy with the previous set of permissions afforded by these roles, and would be surprised to discover that bound subjects can now control _Ingress_ resources. However, in order to be afflicted, that administrator would have had to have applied these role definitions again which, if I understand it, would be a deliberate act, as bootstrapping should only occur once in a given cluster.
    c14fa94a
Name
Last commit
Last update
..
authenticator Loading commit data...
authorizer Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
doc.go Loading commit data...