Skip to content

RBAC policies through kubectl apply -f rbac-namespace-default/ #59

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 9 commits into from
Aug 5, 2017
Merged

RBAC policies through kubectl apply -f rbac-namespace-default/ #59

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
7cf2a5d
RBAC rights are purely additive so ...
solsson Aug 5, 2017
05107fd
I don't really care, but which yaml indentation is winning?
solsson Aug 5, 2017
a8ee55b
With default service account curl works again
solsson Aug 5, 2017
3597426
Got the feeling from kubectl get clusterrole ...
solsson Aug 5, 2017
8f637b7
Recommends that you create rbac
solsson Aug 5, 2017
27421fb
Shows how to see that you need rbac, but makes readme heavier
solsson Aug 5, 2017
1c6b7bb
Addons can maintain their policies, so moving this to
solsson Aug 5, 2017
79d65fd
Details will live in the respective policies
solsson Aug 5, 2017
13520a6
Moved to its PR, multizone-rack-awareness
solsson Aug 5, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
With default service account curl works again 
fixes #39
  • Loading branch information
@solsson
solsson committed Aug 5, 2017
commit a8ee55bb48a4915b2f119b0f409e7e714d9faf55
26 changes: 26 additions & 0 deletions rbac-namespace-default/events-watcher.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
# For kubectl get node, required for kafka init container rack awareness
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: events-watcher
rules:
- apiGroups:
- ""
resources:
- events
verbs:
- watch
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: kafka-events-watcher
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: events-watcher
subjects:
- kind: ServiceAccount
name: default
namespace: kafka