-
Notifications
You must be signed in to change notification settings - Fork 41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RBAC support #513
RBAC support #513
Conversation
Thanks for the contribution! Please ensure your commits follow our style guide. This code will be tested once a Deis maintainer reviews it. |
Jenkins, OK to test |
Codecov Report
@@ Coverage Diff @@
## master #513 +/- ##
==========================================
- Coverage 56.53% 56.45% -0.09%
==========================================
Files 29 29
Lines 1240 1240
==========================================
- Hits 701 700 -1
- Misses 501 502 +1
Partials 38 38
Continue to review full report at Codecov.
|
Jenkins, add to whitelist |
Jenkins, add to whitelist. |
With this change deis-builder became available to work in RBAC-only clusters Works with both Kubernetes 1.5 and 1.6 (see templates/_helpers.tmpl for details) Actually tested with 1.5.7 and 1.6.2 Role allows deis-builder: - secrets: create, update and delete - pods: get, list, watch and create - pods/log: get ClusterRole allows deis-builder: - namespaces: list
Adds RBAC support for Workflow, see also: - deis/builder#513 - deis/controller#1292 - deis/fluentd#96 - deis/monitor#195 - deis/router#344
With this change deis-builder became available to work in RBAC-only clusters
Works with both Kubernetes 1.5 and 1.6 (see
templates/_helpers.tmpl
for details)Actually tested with 1.5.7 and 1.6.2
Role allows
deis-builder
:secrets
:create
,update
anddelete
pods
:get
,list
,watch
andcreate
pods/log:
get
ClusterRole allows
deis-builder
:namespaces
:list