From 006e945a2ff7a167808664ed2ac9337b9aaf2588 Mon Sep 17 00:00:00 2001 From: shubhamchaudhary Date: Fri, 13 Mar 2020 18:16:03 +0530 Subject: [PATCH] update(rbac): Adding pods/log permission for failStep in all charts Signed-off-by: shubhamchaudhary --- charts/coredns/coredns-pod-delete/rbac.yaml | 2 +- charts/generic/container-kill/rbac.yaml | 2 +- charts/generic/container-kill/rbac_nginx_getstarted.yaml | 2 +- charts/generic/disk-fill/rbac.yaml | 2 +- charts/generic/disk-loss/rbac.yaml | 2 +- charts/generic/node-cpu-hog/rbac.yaml | 2 +- charts/generic/node-drain/rbac.yaml | 2 +- charts/generic/pod-cpu-hog/rbac.yaml | 2 +- charts/generic/pod-delete/rbac.yaml | 2 +- charts/generic/pod-network-corruption/rbac.yaml | 2 +- charts/generic/pod-network-latency/rbac.yaml | 2 +- charts/generic/pod-network-loss/rbac.yaml | 2 +- charts/kafka/kafka-broker-disk-failure/rbac.yaml | 2 +- charts/kafka/kafka-broker-pod-failure/rbac.yaml | 2 +- charts/openebs/openebs-control-plane-chaos/rbac.yaml | 2 +- charts/openebs/openebs-pool-container-failure/rbac.yaml | 2 +- charts/openebs/openebs-pool-network-delay/rbac.yaml | 2 +- charts/openebs/openebs-pool-network-loss/rbac.yaml | 2 +- charts/openebs/openebs-pool-pod-failure/rbac.yaml | 2 +- charts/openebs/openebs-target-container-failure/rbac.yaml | 2 +- charts/openebs/openebs-target-network-delay/rbac.yaml | 2 +- charts/openebs/openebs-target-network-loss/rbac.yaml | 2 +- charts/openebs/openebs-target-pod-failure/rbac.yaml | 2 +- 23 files changed, 23 insertions(+), 23 deletions(-) diff --git a/charts/coredns/coredns-pod-delete/rbac.yaml b/charts/coredns/coredns-pod-delete/rbac.yaml index 33bb9ee..681caa7 100644 --- a/charts/coredns/coredns-pod-delete/rbac.yaml +++ b/charts/coredns/coredns-pod-delete/rbac.yaml @@ -14,7 +14,7 @@ metadata: name: coredns-pod-delete-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["services", "pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] + resources: ["services", "pods","jobs","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/container-kill/rbac.yaml b/charts/generic/container-kill/rbac.yaml index 433d476..e8adfb3 100644 --- a/charts/generic/container-kill/rbac.yaml +++ b/charts/generic/container-kill/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: container-kill-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","daemonsets","pods/exec","pods/logs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/container-kill/rbac_nginx_getstarted.yaml b/charts/generic/container-kill/rbac_nginx_getstarted.yaml index e310d72..ebffeb7 100644 --- a/charts/generic/container-kill/rbac_nginx_getstarted.yaml +++ b/charts/generic/container-kill/rbac_nginx_getstarted.yaml @@ -16,7 +16,7 @@ metadata: name: container-kill-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","daemonsets","pods/exec","pods/logs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/disk-fill/rbac.yaml b/charts/generic/disk-fill/rbac.yaml index 1c33758..fe8838b 100644 --- a/charts/generic/disk-fill/rbac.yaml +++ b/charts/generic/disk-fill/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: disk-fill-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch"] - resources: ["pods","jobs","pods/exec","events","pods/logs","daemonsets","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/exec","events","pods/log","daemonsets","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/disk-loss/rbac.yaml b/charts/generic/disk-loss/rbac.yaml index 07b1c8b..d5eb7e6 100644 --- a/charts/generic/disk-loss/rbac.yaml +++ b/charts/generic/disk-loss/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: disk-loss-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","secrets","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","secrets","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/node-cpu-hog/rbac.yaml b/charts/generic/node-cpu-hog/rbac.yaml index 36fbccd..840e006 100644 --- a/charts/generic/node-cpu-hog/rbac.yaml +++ b/charts/generic/node-cpu-hog/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: node-cpu-hog-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","events","chaosengines","pods/logs","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","chaosengines","pods/log","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/generic/node-drain/rbac.yaml b/charts/generic/node-drain/rbac.yaml index 8c02f9d..ee1f1ce 100644 --- a/charts/generic/node-drain/rbac.yaml +++ b/charts/generic/node-drain/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: node-drain-sa rules: - apiGroups: ["","litmuschaos.io","batch","extensions"] - resources: ["pods","jobs","events","chaosengines","pods/logs","daemonsets","pods/eviction","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","chaosengines","pods/log","daemonsets","pods/eviction","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/generic/pod-cpu-hog/rbac.yaml b/charts/generic/pod-cpu-hog/rbac.yaml index b252ce7..bf8f8c3 100644 --- a/charts/generic/pod-cpu-hog/rbac.yaml +++ b/charts/generic/pod-cpu-hog/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-cpu-hog-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/pod-delete/rbac.yaml b/charts/generic/pod-delete/rbac.yaml index df0567f..10d8f49 100644 --- a/charts/generic/pod-delete/rbac.yaml +++ b/charts/generic/pod-delete/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-delete-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","deployments","pods/logs","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","deployments","pods/log","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/generic/pod-network-corruption/rbac.yaml b/charts/generic/pod-network-corruption/rbac.yaml index 38824ce..2bf6f83 100644 --- a/charts/generic/pod-network-corruption/rbac.yaml +++ b/charts/generic/pod-network-corruption/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-network-corruption-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/pod-network-latency/rbac.yaml b/charts/generic/pod-network-latency/rbac.yaml index 539c25e..ef6be13 100644 --- a/charts/generic/pod-network-latency/rbac.yaml +++ b/charts/generic/pod-network-latency/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-network-latency-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","pods/logs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/pod-network-loss/rbac.yaml b/charts/generic/pod-network-loss/rbac.yaml index 297970a..4be813a 100644 --- a/charts/generic/pod-network-loss/rbac.yaml +++ b/charts/generic/pod-network-loss/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: pod-network-loss-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/kafka/kafka-broker-disk-failure/rbac.yaml b/charts/kafka/kafka-broker-disk-failure/rbac.yaml index 9b1742c..e97f214 100644 --- a/charts/kafka/kafka-broker-disk-failure/rbac.yaml +++ b/charts/kafka/kafka-broker-disk-failure/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: kafka-broker-disk-failure-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","pods/logs","events","pods/exec","statefulsets","secrets","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/log","events","pods/exec","statefulsets","secrets","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/kafka/kafka-broker-pod-failure/rbac.yaml b/charts/kafka/kafka-broker-pod-failure/rbac.yaml index 8d8de6e..2d32808 100644 --- a/charts/kafka/kafka-broker-pod-failure/rbac.yaml +++ b/charts/kafka/kafka-broker-pod-failure/rbac.yaml @@ -14,7 +14,7 @@ metadata: name: kafka-broker-pod-failure-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","deployments","pods/logs","events","jobs","pods/exec","statefulsets","configmaps","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","deployments","pods/log","events","jobs","pods/exec","statefulsets","configmaps","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/openebs/openebs-control-plane-chaos/rbac.yaml b/charts/openebs/openebs-control-plane-chaos/rbac.yaml index 04994ac..4f91c44 100644 --- a/charts/openebs/openebs-control-plane-chaos/rbac.yaml +++ b/charts/openebs/openebs-control-plane-chaos/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: control-plane-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","deployments","pods/logs","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","deployments","pods/log","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/openebs/openebs-pool-container-failure/rbac.yaml b/charts/openebs/openebs-pool-container-failure/rbac.yaml index d76b666..6bec97c 100644 --- a/charts/openebs/openebs-pool-container-failure/rbac.yaml +++ b/charts/openebs/openebs-pool-container-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pool-container-failure-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - resources: ["pods","jobs","daemonsets","events","pods/logs","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","jobs","daemonsets","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-pool-network-delay/rbac.yaml b/charts/openebs/openebs-pool-network-delay/rbac.yaml index 0d6403a..6cc45ab 100644 --- a/charts/openebs/openebs-pool-network-delay/rbac.yaml +++ b/charts/openebs/openebs-pool-network-delay/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: pool-network-delay-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - resources: ["pods","pods/exec","pods/logs","events","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"] + resources: ["pods","pods/exec","pods/log","events","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-pool-network-loss/rbac.yaml b/charts/openebs/openebs-pool-network-loss/rbac.yaml index 76db421..33aef0d 100644 --- a/charts/openebs/openebs-pool-network-loss/rbac.yaml +++ b/charts/openebs/openebs-pool-network-loss/rbac.yaml @@ -27,7 +27,7 @@ rules: - "pods" - "pods/exec" - "jobs" - - "pods/logs" + - "pods/log" - "events" - "configmaps" - "services" diff --git a/charts/openebs/openebs-pool-pod-failure/rbac.yaml b/charts/openebs/openebs-pool-pod-failure/rbac.yaml index a7519b9..3c39bb0 100644 --- a/charts/openebs/openebs-pool-pod-failure/rbac.yaml +++ b/charts/openebs/openebs-pool-pod-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pool-pod-failure-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - resources: ["pods","jobs","deployments","pods/logs","events","configmaps","secrets","replicasets","persistentvolumeclaims","storageclasses","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","jobs","deployments","pods/log","events","configmaps","secrets","replicasets","persistentvolumeclaims","storageclasses","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/openebs/openebs-target-container-failure/rbac.yaml b/charts/openebs/openebs-target-container-failure/rbac.yaml index f0df809..ea83e0e 100644 --- a/charts/openebs/openebs-target-container-failure/rbac.yaml +++ b/charts/openebs/openebs-target-container-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-container-failure-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"] - resources: ["pods","jobs","pods/logs","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/log","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-target-network-delay/rbac.yaml b/charts/openebs/openebs-target-network-delay/rbac.yaml index a3bd582..132c255 100644 --- a/charts/openebs/openebs-target-network-delay/rbac.yaml +++ b/charts/openebs/openebs-target-network-delay/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-network-delay-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] - resources: ["pods","pods/exec","pods/logs","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","pods/exec","pods/log","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-target-network-loss/rbac.yaml b/charts/openebs/openebs-target-network-loss/rbac.yaml index 7873955..818a699 100644 --- a/charts/openebs/openebs-target-network-loss/rbac.yaml +++ b/charts/openebs/openebs-target-network-loss/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-network-loss-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] - resources: ["pods","pods/exec","pods/logs","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","pods/exec","pods/log","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-target-pod-failure/rbac.yaml b/charts/openebs/openebs-target-pod-failure/rbac.yaml index 4d2d53c..fcfdb9d 100644 --- a/charts/openebs/openebs-target-pod-failure/rbac.yaml +++ b/charts/openebs/openebs-target-pod-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-pod-failure-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] - resources: ["pods","jobs","pods/logs","deployments","pods/exec","events","chaosexperiments","chaosresults","chaosengines","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes"] + resources: ["pods","jobs","pods/log","deployments","pods/exec","events","chaosexperiments","chaosresults","chaosengines","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"]