From 9745b57b1cf9a94f185ec55a6665efeb81a548fb Mon Sep 17 00:00:00 2001 From: Raj Babu Das Date: Thu, 9 Apr 2020 16:34:03 +0530 Subject: [PATCH] Removing daemonset permission from the charts (#201) Signed-off-by: Raj --- charts/generic/container-kill/experiment.yaml | 1 - charts/generic/container-kill/rbac.yaml | 2 +- charts/generic/container-kill/rbac_nginx_getstarted.yaml | 2 +- charts/generic/disk-fill/disk-fill.chartserviceversion.yaml | 2 +- charts/generic/disk-fill/experiment.yaml | 5 +---- charts/generic/disk-fill/rbac.yaml | 4 ++-- charts/generic/node-cpu-hog/experiment.yaml | 1 - charts/generic/node-drain/experiment.yaml | 3 +-- .../generic/node-drain/node-drain.chartserviceversion.yaml | 2 +- charts/generic/node-drain/rbac.yaml | 5 ++--- .../openebs/openebs-pool-container-failure/experiment.yaml | 1 - charts/openebs/openebs-pool-container-failure/rbac.yaml | 2 +- .../openebs/openebs-target-container-failure/experiment.yaml | 1 - charts/openebs/openebs-target-container-failure/rbac.yaml | 2 +- 14 files changed, 12 insertions(+), 21 deletions(-) diff --git a/charts/generic/container-kill/experiment.yaml b/charts/generic/container-kill/experiment.yaml index ff7379d..3df5478 100644 --- a/charts/generic/container-kill/experiment.yaml +++ b/charts/generic/container-kill/experiment.yaml @@ -15,7 +15,6 @@ spec: - "batch" - "litmuschaos.io" resources: - - "daemonsets" - "jobs" - "pods" - "pods/log" diff --git a/charts/generic/container-kill/rbac.yaml b/charts/generic/container-kill/rbac.yaml index e8adfb3..45f218b 100644 --- a/charts/generic/container-kill/rbac.yaml +++ b/charts/generic/container-kill/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: container-kill-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/container-kill/rbac_nginx_getstarted.yaml b/charts/generic/container-kill/rbac_nginx_getstarted.yaml index ebffeb7..1fc5ad8 100644 --- a/charts/generic/container-kill/rbac_nginx_getstarted.yaml +++ b/charts/generic/container-kill/rbac_nginx_getstarted.yaml @@ -16,7 +16,7 @@ metadata: name: container-kill-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/disk-fill/disk-fill.chartserviceversion.yaml b/charts/generic/disk-fill/disk-fill.chartserviceversion.yaml index 3d6d475..49fd295 100644 --- a/charts/generic/disk-fill/disk-fill.chartserviceversion.yaml +++ b/charts/generic/disk-fill/disk-fill.chartserviceversion.yaml @@ -40,4 +40,4 @@ spec: icon: - url: mediatype: "" - chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/disk-fill/experiment.yaml + chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/disk-fill/experiment.yaml \ No newline at end of file diff --git a/charts/generic/disk-fill/experiment.yaml b/charts/generic/disk-fill/experiment.yaml index ac6ee03..024713e 100644 --- a/charts/generic/disk-fill/experiment.yaml +++ b/charts/generic/disk-fill/experiment.yaml @@ -21,7 +21,6 @@ spec: - "pods/exec" - "pods/log" - "events" - - "daemonsets" - "chaosengines" - "chaosexperiments" - "chaosresults" @@ -57,6 +56,4 @@ spec: value: '' labels: - name: disk-fill - - + name: disk-fill \ No newline at end of file diff --git a/charts/generic/disk-fill/rbac.yaml b/charts/generic/disk-fill/rbac.yaml index fe8838b..b5253af 100644 --- a/charts/generic/disk-fill/rbac.yaml +++ b/charts/generic/disk-fill/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: disk-fill-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch"] - resources: ["pods","jobs","pods/exec","events","pods/log","daemonsets","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/exec","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 @@ -31,4 +31,4 @@ roleRef: subjects: - kind: ServiceAccount name: disk-fill-sa - namespace: default + namespace: default \ No newline at end of file diff --git a/charts/generic/node-cpu-hog/experiment.yaml b/charts/generic/node-cpu-hog/experiment.yaml index 8eac844..c8ff1bc 100644 --- a/charts/generic/node-cpu-hog/experiment.yaml +++ b/charts/generic/node-cpu-hog/experiment.yaml @@ -16,7 +16,6 @@ spec: - "apps" - "litmuschaos.io" resources: - - "daemonsets" - "jobs" - "pods" - "pods/log" diff --git a/charts/generic/node-drain/experiment.yaml b/charts/generic/node-drain/experiment.yaml index a88be15..54cab6e 100644 --- a/charts/generic/node-drain/experiment.yaml +++ b/charts/generic/node-drain/experiment.yaml @@ -22,7 +22,6 @@ spec: - "events" - "pods/log" - "pods/eviction" - - "daemonsets" - "chaosengines" - "chaosexperiments" - "chaosresults" @@ -68,4 +67,4 @@ spec: value: '' labels: - name: node-drain + name: node-drain \ No newline at end of file diff --git a/charts/generic/node-drain/node-drain.chartserviceversion.yaml b/charts/generic/node-drain/node-drain.chartserviceversion.yaml index 32c045c..991e756 100644 --- a/charts/generic/node-drain/node-drain.chartserviceversion.yaml +++ b/charts/generic/node-drain/node-drain.chartserviceversion.yaml @@ -41,4 +41,4 @@ spec: icon: - url: "" mediatype: "" - chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/node-drain/experiment.yaml + chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/node-drain/experiment.yaml \ No newline at end of file diff --git a/charts/generic/node-drain/rbac.yaml b/charts/generic/node-drain/rbac.yaml index ee1f1ce..762a1c7 100644 --- a/charts/generic/node-drain/rbac.yaml +++ b/charts/generic/node-drain/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: node-drain-sa rules: - apiGroups: ["","litmuschaos.io","batch","extensions"] - resources: ["pods","jobs","events","chaosengines","pods/log","daemonsets","pods/eviction","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","chaosengines","pods/log","pods/eviction","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] @@ -34,5 +34,4 @@ roleRef: subjects: - kind: ServiceAccount name: node-drain-sa - namespace: default - + namespace: default \ No newline at end of file diff --git a/charts/openebs/openebs-pool-container-failure/experiment.yaml b/charts/openebs/openebs-pool-container-failure/experiment.yaml index 2b1455a..82ad7d6 100644 --- a/charts/openebs/openebs-pool-container-failure/experiment.yaml +++ b/charts/openebs/openebs-pool-container-failure/experiment.yaml @@ -22,7 +22,6 @@ spec: - "openebs.io" - "storage.k8s.io" resources: - - "daemonsets" - "replicasets" - "events" - "jobs" diff --git a/charts/openebs/openebs-pool-container-failure/rbac.yaml b/charts/openebs/openebs-pool-container-failure/rbac.yaml index 6bec97c..9c9a95f 100644 --- a/charts/openebs/openebs-pool-container-failure/rbac.yaml +++ b/charts/openebs/openebs-pool-container-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pool-container-failure-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - resources: ["pods","jobs","daemonsets","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","jobs","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-target-container-failure/experiment.yaml b/charts/openebs/openebs-target-container-failure/experiment.yaml index b997724..05a79fb 100644 --- a/charts/openebs/openebs-target-container-failure/experiment.yaml +++ b/charts/openebs/openebs-target-container-failure/experiment.yaml @@ -20,7 +20,6 @@ spec: - "litmuschaos.io" - "storage.k8s.io" resources: - - "daemonsets" - "jobs" - "pods" - "events" diff --git a/charts/openebs/openebs-target-container-failure/rbac.yaml b/charts/openebs/openebs-target-container-failure/rbac.yaml index ea83e0e..2ab4ec9 100644 --- a/charts/openebs/openebs-target-container-failure/rbac.yaml +++ b/charts/openebs/openebs-target-container-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-container-failure-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"] - resources: ["pods","jobs","pods/log","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/log","pods/exec","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1