Commit 908998a7 authored by Adam Harrison's avatar Adam Harrison
Browse files

Update RBAC permissions for kubectl v1.10.3

parent bc3f28d1
......@@ -8,25 +8,16 @@ rules:
# Allow kubectl to drain/uncordon
#
# NB: These permissions are tightly coupled to the bundled version of kubectl; the ones below
# match https://github.com/kubernetes/kubernetes/blob/v1.9.6/pkg/kubectl/cmd/drain.go
# match https://github.com/kubernetes/kubernetes/blob/v1.10.3/pkg/kubectl/cmd/drain.go
#
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get", "patch"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["list"]
- apiGroups: [""]
resources: ["replicationcontrollers"]
verbs: ["get"]
- apiGroups: ["apps"]
resources: ["statefulsets"]
verbs: ["get"]
verbs: ["list","delete","get"]
- apiGroups: ["extensions"]
resources: ["daemonsets", "replicasets"]
verbs: ["get"]
- apiGroups: ["batch"]
resources: ["jobs"]
resources: ["daemonsets"]
verbs: ["get"]
- apiGroups: [""]
resources: ["pods/eviction"]
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment