ivanch/litmus-hub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(permissions): Adding events resources permission in all experiments

Browse Source 
Signed-off-by: shubhamchaudhary <shubham.chaudhary@mayadata.io>
This commit is contained in:
shubhamchaudhary
2020-03-09 16:49:34 +05:30
parent 6d983791c3
commit 6d3fe76f9f
45 changed files with 45 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
charts/generic/container-kill/experiment.yaml
View File

@@ -18,6 +18,7 @@ spec:
- "daemonsets"
- "jobs"
- "pods"
- "events"
- "pods/exec"
- "chaosengines"
- "chaosexperiments"

2
charts/generic/container-kill/rbac.yaml
View File

@@ -16,7 +16,7 @@ metadata:
name: container-kill-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","jobs","daemonsets","pods/exec","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","daemonsets","pods/exec","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

2
charts/generic/container-kill/rbac_nginx_getstarted.yaml
View File

@@ -16,7 +16,7 @@ metadata:
name: container-kill-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","jobs","daemonsets","pods/exec","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","daemonsets","pods/exec","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

1
charts/generic/disk-fill/experiment.yaml
View File

@@ -19,6 +19,7 @@ spec:
- "jobs"
- "pods"
- "pods/exec"
- "events"
- "daemonsets"
- "chaosengines"
- "chaosexperiments"

2
charts/generic/disk-fill/rbac.yaml
View File

@@ -15,7 +15,7 @@ metadata:
name: disk-fill-sa
rules:
- apiGroups: ["","apps","litmuschaos.io","batch"]
resources: ["pods","jobs","pods/exec","daemonsets","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","pods/exec","events","daemonsets","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

1
charts/generic/disk-loss/experiment.yaml
View File

@@ -17,6 +17,7 @@ spec:
resources:
- "jobs"
- "pods"
- "events"
- "secrets"
- "chaosengines"
- "chaosexperiments"

2
charts/generic/disk-loss/rbac.yaml
View File

@@ -15,7 +15,7 @@ metadata:
name: disk-loss-sa
rules:
- apiGroups: ["","litmuschaos.io","batch"]
resources: ["pods","jobs","secrets","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","secrets","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

1
charts/generic/node-cpu-hog/experiment.yaml
View File

@@ -20,6 +20,7 @@ spec:
- "jobs"
- "pods"
- "pods/exec"
- "events"
- "chaosengines"
- "chaosexperiments"
- "chaosresults"

2
charts/generic/node-cpu-hog/rbac.yaml
View File

@@ -15,7 +15,7 @@ metadata:
name: node-cpu-hog-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","daemonsets","jobs","pods/exec","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","daemonsets","jobs","pods/exec","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
- apiGroups: [""]
resources: ["nodes"]

1
charts/generic/node-drain/experiment.yaml
View File

@@ -19,6 +19,7 @@ spec:
resources:
- "jobs"
- "pods"
- "events"
- "pods/eviction"
- "daemonsets"
- "chaosengines"

2
charts/generic/node-drain/rbac.yaml
View File

@@ -15,7 +15,7 @@ metadata:
name: node-drain-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","extensions"]
resources: ["pods","jobs","chaosengines","daemonsets","pods/eviction","chaosexperiments","chaosresults"]
resources: ["pods","jobs","events","chaosengines","daemonsets","pods/eviction","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
- apiGroups: [""]
resources: ["nodes"]

1
charts/generic/pod-cpu-hog/experiment.yaml
View File

@@ -17,6 +17,7 @@ spec:
resources:
- "jobs"
- "pods"
- "events"
- "chaosengines"
- "chaosexperiments"
- "chaosresults"

2
charts/generic/pod-cpu-hog/rbac.yaml
View File

@@ -16,7 +16,7 @@ metadata:
name: pod-cpu-hog-sa
rules:
- apiGroups: ["","litmuschaos.io","batch"]
resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

1
charts/generic/pod-delete/experiment.yaml
View File

@@ -19,6 +19,7 @@ spec:
- "deployments"
- "jobs"
- "pods"
- "events"
- "configmaps"
- "chaosengines"
- "chaosexperiments"

2
charts/generic/pod-delete/rbac.yaml
View File

@@ -16,7 +16,7 @@ metadata:
name: pod-delete-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","deployments","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","deployments","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
- apiGroups: [""]
resources: ["nodes"]

1
charts/generic/pod-network-corruption/experiment.yaml
View File

@@ -17,6 +17,7 @@ spec:
resources:
- "jobs"
- "pods"
- "events"
- "chaosengines"
- "chaosexperiments"
- "chaosresults"

2
charts/generic/pod-network-corruption/rbac.yaml
View File

@@ -16,7 +16,7 @@ metadata:
name: pod-network-corruption-sa
rules:
- apiGroups: ["","litmuschaos.io","batch"]
resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

1
charts/generic/pod-network-latency/experiment.yaml
View File

@@ -17,6 +17,7 @@ spec:
resources:
- "jobs"
- "pods"
- "events"
- "chaosengines"
- "chaosexperiments"
- "chaosresults"

2
charts/generic/pod-network-latency/rbac.yaml
View File

@@ -16,7 +16,7 @@ metadata:
name: pod-network-latency-sa
rules:
- apiGroups: ["","litmuschaos.io","batch"]
resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

1
charts/generic/pod-network-loss/experiment.yaml
View File

@@ -17,6 +17,7 @@ spec:
resources:
- "jobs"
- "pods"
- "events"
- "chaosengines"
- "chaosexperiments"
- "chaosresults"

2
charts/generic/pod-network-loss/rbac.yaml
View File

@@ -15,7 +15,7 @@ metadata:
name: pod-network-loss-sa
rules:
- apiGroups: ["","litmuschaos.io","batch"]
resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1