Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RBAC support #513

Merged
merged 2 commits into from
May 31, 2017
Merged

RBAC support #513

merged 2 commits into from
May 31, 2017

Conversation

Bregor
Copy link
Contributor

@Bregor Bregor commented May 7, 2017

With this change deis-builder became available to work in RBAC-only clusters

Works with both Kubernetes 1.5 and 1.6 (see templates/_helpers.tmpl for details)
Actually tested with 1.5.7 and 1.6.2

Role allows deis-builder:

  • secrets: create, update and delete
  • pods: get, list, watch and create
  • pods/log: get

ClusterRole allows deis-builder:

  • namespaces: list

@deis-admin
Copy link

Thanks for the contribution! Please ensure your commits follow our style guide. This code will be tested once a Deis maintainer reviews it.

@vdice vdice added this to the v2.15 milestone May 8, 2017
@vdice
Copy link
Member

vdice commented May 8, 2017

Jenkins, OK to test

@codecov-io
Copy link

codecov-io commented May 8, 2017

Codecov Report

Merging #513 into master will decrease coverage by 0.08%.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff             @@
##           master     #513      +/-   ##
==========================================
- Coverage   56.53%   56.45%   -0.09%     
==========================================
  Files          29       29              
  Lines        1240     1240              
==========================================
- Hits          701      700       -1     
- Misses        501      502       +1     
  Partials       38       38
Impacted Files Coverage Δ
pkg/healthsrv/circuit_state.go 77.77% <0%> (-11.12%) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a6403e7...ce77ee6. Read the comment docs.

@vdice
Copy link
Member

vdice commented May 9, 2017

Jenkins, add to whitelist

@mboersma
Copy link
Member

mboersma commented May 9, 2017

Jenkins, add to whitelist.

With this change deis-builder became available to work in RBAC-only clusters

Works with both Kubernetes 1.5 and 1.6 (see templates/_helpers.tmpl for details)
Actually tested with 1.5.7 and 1.6.2

Role allows deis-builder:
- secrets: create, update and delete
- pods: get, list, watch and create
- pods/log: get
ClusterRole allows deis-builder:
- namespaces: list
@Bregor Bregor mentioned this pull request May 12, 2017
@vdice vdice requested review from vdice and mboersma May 16, 2017 17:00
@vdice vdice added the LGTM1 label May 16, 2017
@vdice vdice merged commit 20bbfb1 into deis:master May 31, 2017
vdice pushed a commit to deis/workflow that referenced this pull request May 31, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants