chore(permissions): sync the experiment and rbac permissions (#406)

* chore(permissions): sync the experiment and rbac permissions

Signed-off-by: shubhamchaudhary <shubham.chaudhary@mayadata.io>

* Add "statefulsets" in pod autoscaler permissions

Signed-off-by: udit <udit.gaurav@mayadata.io>

Co-authored-by: udit <udit.gaurav@mayadata.io>
This commit is contained in:
Shubham Chaudhary
2021-01-04 14:26:45 +05:30
committed by GitHub
parent 8e69a7e196
commit 6ced128ee5
27 changed files with 131 additions and 24 deletions

View File

@@ -28,7 +28,6 @@ spec:
- "pods/exec" - "pods/exec"
- "services" - "services"
- "events" - "events"
- "configmaps"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
- "chaosresults" - "chaosresults"
@@ -40,13 +39,6 @@ spec:
- "update" - "update"
- "delete" - "delete"
- "deletecollection" - "deletecollection"
- apiGroups:
- ""
resources:
- "nodes"
verbs:
- "get"
- "list"
image: "litmuschaos/go-runner:latest" image: "litmuschaos/go-runner:latest"
imagePullPolicy: Always imagePullPolicy: Always
args: args:

View File

@@ -17,12 +17,21 @@ spec:
- "" - ""
- "apps" - "apps"
- "batch" - "batch"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "events" - "events"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec" - "pods/exec"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -18,12 +18,21 @@ spec:
- "" - ""
- "apps" - "apps"
- "batch" - "batch"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/exec" - "pods/exec"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -17,12 +17,12 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
@@ -34,6 +34,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -17,12 +17,12 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
@@ -34,6 +34,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -18,7 +18,6 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "extensions"
- "litmuschaos.io" - "litmuschaos.io"
- "apps" - "apps"
resources: resources:
@@ -26,6 +25,7 @@ spec:
- "pods" - "pods"
- "events" - "events"
- "pods/log" - "pods/log"
- "pods/exec"
- "daemonsets" - "daemonsets"
- "pods/eviction" - "pods/eviction"
- "chaosengines" - "chaosengines"
@@ -38,6 +38,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -17,12 +17,12 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
@@ -34,6 +34,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -17,12 +17,12 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
@@ -34,6 +34,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -18,12 +18,12 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
@@ -36,6 +36,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -18,12 +18,12 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
@@ -36,6 +36,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -18,13 +18,14 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "extensions" - "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "events" - "events"
- "pods/log" - "pods/log"
- "pods/exec"
- "daemonsets" - "daemonsets"
- "pods/eviction" - "pods/eviction"
- "chaosengines" - "chaosengines"
@@ -37,6 +38,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -28,9 +28,6 @@ rules:
- apiGroups: ["litmuschaos.io"] - apiGroups: ["litmuschaos.io"]
resources: ["chaosengines","chaosexperiments","chaosresults"] resources: ["chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update"] verbs: ["create","list","get","patch","update"]
- apiGroups: [""]
resources: ["nodes"]
verbs: ["patch","get","list"]
- apiGroups: [""] - apiGroups: [""]
resources: ["nodes"] resources: ["nodes"]
verbs: ["patch","get","list","update"] verbs: ["patch","get","list","update"]

View File

@@ -28,9 +28,6 @@ rules:
- apiGroups: ["litmuschaos.io"] - apiGroups: ["litmuschaos.io"]
resources: ["chaosengines","chaosexperiments","chaosresults"] resources: ["chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update"] verbs: ["create","list","get","patch","update"]
- apiGroups: [""]
resources: ["nodes"]
verbs: ["patch","get","list"]
- apiGroups: [""] - apiGroups: [""]
resources: ["nodes"] resources: ["nodes"]
verbs: ["patch","get","list","update"] verbs: ["patch","get","list","update"]

View File

@@ -23,7 +23,9 @@ spec:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "pods/exec"
- "deployments" - "deployments"
- "statefulsets"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
@@ -35,6 +37,7 @@ spec:
- "patch" - "patch"
- "update" - "update"
- "delete" - "delete"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:
@@ -42,6 +45,9 @@ spec:
verbs: verbs:
- "get" - "get"
- "list" - "list"
- "create"
- "patch"
- "update"
image: "litmuschaos/go-runner:latest" image: "litmuschaos/go-runner:latest"
imagePullPolicy: Always imagePullPolicy: Always
args: args:

View File

@@ -23,7 +23,7 @@ rules:
resources: ["jobs"] resources: ["jobs"]
verbs: ["create","list","get","delete","deletecollection"] verbs: ["create","list","get","delete","deletecollection"]
- apiGroups: ["apps"] - apiGroups: ["apps"]
resources: ["deployments"] resources: ["deployments","statefulsets"]
verbs: ["list","get","patch","update"] verbs: ["list","get","patch","update"]
- apiGroups: ["litmuschaos.io"] - apiGroups: ["litmuschaos.io"]
resources: ["chaosengines","chaosexperiments","chaosresults"] resources: ["chaosengines","chaosexperiments","chaosresults"]

View File

@@ -23,7 +23,7 @@ rules:
resources: ["jobs"] resources: ["jobs"]
verbs: ["create","list","get","delete","deletecollection"] verbs: ["create","list","get","delete","deletecollection"]
- apiGroups: ["apps"] - apiGroups: ["apps"]
resources: ["deployments"] resources: ["deployments","statefulsets"]
verbs: ["list","get","patch","update"] verbs: ["list","get","patch","update"]
- apiGroups: ["litmuschaos.io"] - apiGroups: ["litmuschaos.io"]
resources: ["chaosengines","chaosexperiments","chaosresults"] resources: ["chaosengines","chaosexperiments","chaosresults"]

View File

@@ -17,12 +17,22 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "events" - "events"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec" - "pods/exec"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -18,6 +18,8 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "apps" - "apps"
- "apps.openshift.io"
- "argoproj.io"
- "batch" - "batch"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
@@ -25,6 +27,14 @@ spec:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -18,11 +18,21 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec" - "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"

View File

@@ -18,11 +18,21 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec" - "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"

View File

@@ -17,11 +17,22 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -17,11 +17,22 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -17,11 +17,22 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -17,11 +17,22 @@ spec:
- apiGroups: - apiGroups:
- "" - ""
- "batch" - "batch"
- "apps"
- "apps.openshift.io"
- "argoproj.io"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"
- "replicationcontrollers"
- "deployments"
- "statefulsets"
- "daemonsets"
- "replicasets"
- "deploymentconfigs"
- "rollouts"
- "pods/exec"
- "events" - "events"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -36,7 +36,9 @@ spec:
- "get" - "get"
- "delete" - "delete"
- "list" - "list"
- "update"
- "patch" - "patch"
- "deletecollection"
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View File

@@ -23,6 +23,7 @@ spec:
- "pods" - "pods"
- "events" - "events"
- "pods/log" - "pods/log"
- "pods/exec"
- "secrets" - "secrets"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"

View File

@@ -23,6 +23,7 @@ spec:
- "pods" - "pods"
- "events" - "events"
- "pods/log" - "pods/log"
- "pods/exec"
- "secrets" - "secrets"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"