x/stackube
Code Issues Proposed changes

Add requires apis to rbac cluster roles

Browse Source 
stackube-controller needs to create/delete roles and rolebindings.
It also has to visit all apis in order to create tenant's own role.

Change-Id: I48e8f0aaec00241d30dba818bcc19a3349237a16
Closes-Bug: 1707599
Signed-off-by: Pengfei Ni <feiskyer@gmail.com>
This commit is contained in:
Pengfei Ni 2017-07-31 17:23:08 +08:00
parent f6d5dccb19
commit 82b659963e
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
deployment/stackube.yaml
View File

@ -266,10 +266,7 @@ rules:
- apiGroups:
- "*"
resources:
- namespaces
- services
- services/status
- endpoints
- "*"
verbs:
- "*"
- apiGroups:
@ -277,14 +274,16 @@ rules:
resources:
- customresourcedefinitions
verbs:
- create
- "*"
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterroles
- clusterrolebindings
- roles
- rolebindings
verbs:
- create
- "*"
- apiGroups:
- stackube.kubernetes.io
resources: