x/stackube
Code Issues Proposed changes

Add requires apis to rbac cluster roles

Browse Source 
stackube-controller needs to create/delete roles and rolebindings.
It also has to visit all apis in order to create tenant's own role.

Change-Id: I48e8f0aaec00241d30dba818bcc19a3349237a16
Closes-Bug: 1707599
Signed-off-by: Pengfei Ni <feiskyer@gmail.com>
This commit is contained in:
Pengfei Ni 2017-07-31 17:23:08 +08:00
parent f6d5dccb19
commit 82b659963e
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
deployment/stackube.yaml
View File

@ -266,10 +266,7 @@ rules:
- apiGroups: - apiGroups:
- "*" - "*"
resources: resources:
- namespaces - "*"
- services
- services/status
- endpoints
verbs: verbs:
- "*" - "*"
- apiGroups: - apiGroups:
@ -277,14 +274,16 @@ rules:
resources: resources:
- customresourcedefinitions - customresourcedefinitions
verbs: verbs:
- create - "*"
- apiGroups: - apiGroups:
- rbac.authorization.k8s.io - rbac.authorization.k8s.io
resources: resources:
- clusterroles - clusterroles
- clusterrolebindings - clusterrolebindings
- roles
- rolebindings
verbs: verbs:
- create - "*"
- apiGroups: - apiGroups:
- stackube.kubernetes.io - stackube.kubernetes.io
resources: resources: