ivanch/litmus-hub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(permissions): Adding minimal permissions in all experiments (#423)

Browse Source 
* chore(permissions): Adding minimal permissions in all experimenys

Signed-off-by: shubhamchaudhary <shubham@chaosnative.com>

* fix(script): convert combine experiments code to binary

Signed-off-by: shubhamchaudhary <shubham@chaosnative.com>
This commit is contained in:
Shubham Chaudhary
2021-03-11 12:59:52 +05:30
committed by GitHub
parent df11ea13fe
commit 7b7cba0f70
47 changed files with 193 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
charts/generic/pod-delete/rbac-psp.yaml
View File

@@ -18,8 +18,11 @@ metadata:
app.kubernetes.io/part-of: litmus
rules:
- apiGroups: [""]
resources: ["pods","pods/exec","pods/log","events","replicationcontrollers"]
resources: ["pods","events"]
verbs: ["create","list","get","patch","update","delete","deletecollection"]
- apiGroups: [""]
resources: ["pods/exec","pods/log","replicationcontrollers"]
verbs: ["create","list","get"]
- apiGroups: ["batch"]
resources: ["jobs"]
verbs: ["create","list","get","delete","deletecollection"]

5
charts/generic/pod-delete/rbac.yaml
View File

@@ -18,8 +18,11 @@ metadata:
app.kubernetes.io/part-of: litmus
rules:
- apiGroups: [""]
resources: ["pods","pods/exec","pods/log","events","replicationcontrollers"]
resources: ["pods","events"]
verbs: ["create","list","get","patch","update","delete","deletecollection"]
- apiGroups: [""]
resources: ["pods/exec","pods/log","replicationcontrollers"]
verbs: ["create","list","get"]
- apiGroups: ["batch"]
resources: ["jobs"]
verbs: ["create","list","get","delete","deletecollection"]

5
charts/generic/pod-delete/rbac_nginx_getstarted.yaml
View File

@@ -16,8 +16,11 @@ metadata:
name: pod-delete-sa
rules:
- apiGroups: [""]
resources: ["pods","pods/exec","pods/log","events","replicationcontrollers"]
resources: ["pods","events"]
verbs: ["create","list","get","patch","update","delete","deletecollection"]
- apiGroups: [""]
resources: ["pods/exec","pods/log","replicationcontrollers"]
verbs: ["create","list","get"]
- apiGroups: ["batch"]
resources: ["jobs"]
verbs: ["create","list","get","delete","deletecollection"]