Skip to content

RBAC policies through kubectl apply -f rbac-namespace-default/ #59

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 9 commits into from
Aug 5, 2017
Merged

RBAC policies through kubectl apply -f rbac-namespace-default/ #59

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
7cf2a5d
RBAC rights are purely additive so ...
solsson Aug 5, 2017
05107fd
I don't really care, but which yaml indentation is winning?
solsson Aug 5, 2017
a8ee55b
With default service account curl works again
solsson Aug 5, 2017
3597426
Got the feeling from kubectl get clusterrole ...
solsson Aug 5, 2017
8f637b7
Recommends that you create rbac
solsson Aug 5, 2017
27421fb
Shows how to see that you need rbac, but makes readme heavier
solsson Aug 5, 2017
1c6b7bb
Addons can maintain their policies, so moving this to
solsson Aug 5, 2017
79d65fd
Details will live in the respective policies
solsson Aug 5, 2017
13520a6
Moved to its PR, multizone-rack-awareness
solsson Aug 5, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Got the feeling from kubectl get clusterrole ... 
that having access control rules, in particular cluster scoped,
lying around without knowing where they come from
will be unmaintainable over time. Labels show up nicely in describe.
  • Loading branch information
@solsson
solsson committed Aug 5, 2017
commit 35974266ae938856f3a254b12308b1a99e67e5e7
4 changes: 4 additions & 0 deletions rbac-namespace-default/events-watcher.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: events-watcher
labels:
origin: github.com_Yolean_kubernetes-kafka
rules:
- apiGroups:
- ""
Expand All @@ -16,6 +18,8 @@ kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: kafka-events-watcher
labels:
origin: github.com_Yolean_kubernetes-kafka
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
Expand Down
4 changes: 4 additions & 0 deletions rbac-namespace-default/node-reader.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: node-reader
labels:
origin: github.com_Yolean_kubernetes-kafka
rules:
- apiGroups:
- ""
Expand All @@ -16,6 +18,8 @@ kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: kafka-node-reader
labels:
origin: github.com_Yolean_kubernetes-kafka
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
Expand Down