Removing daemonset permission from the charts (#201)

Signed-off-by: Raj <raj.das@mayadata.io>
This commit is contained in:
Raj Babu Das
2020-04-09 16:34:03 +05:30
committed by GitHub
parent 11cbd5d51a
commit 9745b57b1c
14 changed files with 12 additions and 21 deletions

View File

@@ -15,7 +15,6 @@ spec:
- "batch"
- "litmuschaos.io"
resources:
- "daemonsets"
- "jobs"
- "pods"
- "pods/log"

View File

@@ -16,7 +16,7 @@ metadata:
name: container-kill-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

View File

@@ -16,7 +16,7 @@ metadata:
name: container-kill-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

View File

@@ -40,4 +40,4 @@ spec:
icon:
- url:
mediatype: ""
chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/disk-fill/experiment.yaml
chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/disk-fill/experiment.yaml

View File

@@ -21,7 +21,6 @@ spec:
- "pods/exec"
- "pods/log"
- "events"
- "daemonsets"
- "chaosengines"
- "chaosexperiments"
- "chaosresults"
@@ -57,6 +56,4 @@ spec:
value: ''
labels:
name: disk-fill
name: disk-fill

View File

@@ -15,7 +15,7 @@ metadata:
name: disk-fill-sa
rules:
- apiGroups: ["","apps","litmuschaos.io","batch"]
resources: ["pods","jobs","pods/exec","events","pods/log","daemonsets","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","pods/exec","events","pods/log","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1
@@ -31,4 +31,4 @@ roleRef:
subjects:
- kind: ServiceAccount
name: disk-fill-sa
namespace: default
namespace: default

View File

@@ -16,7 +16,6 @@ spec:
- "apps"
- "litmuschaos.io"
resources:
- "daemonsets"
- "jobs"
- "pods"
- "pods/log"

View File

@@ -22,7 +22,6 @@ spec:
- "events"
- "pods/log"
- "pods/eviction"
- "daemonsets"
- "chaosengines"
- "chaosexperiments"
- "chaosresults"
@@ -68,4 +67,4 @@ spec:
value: ''
labels:
name: node-drain
name: node-drain

View File

@@ -41,4 +41,4 @@ spec:
icon:
- url: ""
mediatype: ""
chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/node-drain/experiment.yaml
chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/node-drain/experiment.yaml

View File

@@ -15,7 +15,7 @@ metadata:
name: node-drain-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","extensions"]
resources: ["pods","jobs","events","chaosengines","pods/log","daemonsets","pods/eviction","chaosexperiments","chaosresults"]
resources: ["pods","jobs","events","chaosengines","pods/log","pods/eviction","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
- apiGroups: [""]
resources: ["nodes"]
@@ -34,5 +34,4 @@ roleRef:
subjects:
- kind: ServiceAccount
name: node-drain-sa
namespace: default
namespace: default

View File

@@ -22,7 +22,6 @@ spec:
- "openebs.io"
- "storage.k8s.io"
resources:
- "daemonsets"
- "replicasets"
- "events"
- "jobs"

View File

@@ -16,7 +16,7 @@ metadata:
name: pool-container-failure-sa
rules:
- apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"]
resources: ["pods","jobs","daemonsets","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
resources: ["pods","jobs","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1

View File

@@ -20,7 +20,6 @@ spec:
- "litmuschaos.io"
- "storage.k8s.io"
resources:
- "daemonsets"
- "jobs"
- "pods"
- "events"

View File

@@ -16,7 +16,7 @@ metadata:
name: target-container-failure-sa
rules:
- apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"]
resources: ["pods","jobs","pods/log","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"]
resources: ["pods","jobs","pods/log","pods/exec","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1