update(crd): updating crds and add namespaced scope superset rbac (#1827)

Signed-off-by: shubhamchaudhary <shubham.chaudhary@mayadata.io>
This commit is contained in:
Shubham Chaudhary 2020-08-04 20:23:37 +05:30 committed by GitHub
parent 958be4e606
commit 75ab373ce4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions

View File

@ -2,6 +2,7 @@ apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
name: litmus name: litmus
namespace: default
labels: labels:
name: litmus name: litmus
--- ---
@ -9,17 +10,19 @@ apiVersion: rbac.authorization.k8s.io/v1beta1
kind: Role kind: Role
metadata: metadata:
name: litmus name: litmus
namespace: default
labels: labels:
name: litmus name: litmus
rules: rules:
- apiGroups: ["","apps","batch","extensions","litmuschaos.io"] - apiGroups: ["","apps","batch","extensions","litmuschaos.io"]
resources: ["pods","pods/exec","pods/log","pods/eviction",jobs","deployments","daemonsets","statefulsets","events","configmaps","services","chaosengines","chaosexperiments","chaosresults"] resources: ["pods","pods/exec","pods/log","pods/eviction","jobs","deployments","daemonsets","statefulsets","events","configmaps","services","chaosengines","chaosexperiments","chaosresults"]
verbs: ["get","create","update","patch","delete","list","watch","deletecollection"] verbs: ["get","create","update","patch","delete","list","watch","deletecollection"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
name: litmus name: litmus
namespace: default
labels: labels:
name: litmus name: litmus
roleRef: roleRef:
@ -29,11 +32,13 @@ roleRef:
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: litmus name: litmus
namespace: default
--- ---
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: chaos-operator-ce name: chaos-operator-ce
namespace: default
spec: spec:
replicas: 1 replicas: 1
selector: selector: