Removing daemonset permission from the charts (#201)

Signed-off-by: Raj <raj.das@mayadata.io>
This commit is contained in:
Raj Babu Das
2020-04-09 16:34:03 +05:30
committed by GitHub
parent 11cbd5d51a
commit 9745b57b1c
14 changed files with 12 additions and 21 deletions

View File

@@ -15,7 +15,6 @@ spec:
- "batch" - "batch"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "daemonsets"
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"

View File

@@ -16,7 +16,7 @@ metadata:
name: container-kill-sa name: container-kill-sa
rules: rules:
- apiGroups: ["","litmuschaos.io","batch","apps"] - apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"] verbs: ["create","list","get","patch","update","delete"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1

View File

@@ -16,7 +16,7 @@ metadata:
name: container-kill-sa name: container-kill-sa
rules: rules:
- apiGroups: ["","litmuschaos.io","batch","apps"] - apiGroups: ["","litmuschaos.io","batch","apps"]
resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"] verbs: ["create","list","get","patch","update","delete"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1

View File

@@ -21,7 +21,6 @@ spec:
- "pods/exec" - "pods/exec"
- "pods/log" - "pods/log"
- "events" - "events"
- "daemonsets"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
- "chaosresults" - "chaosresults"
@@ -58,5 +57,3 @@ spec:
labels: labels:
name: disk-fill name: disk-fill

View File

@@ -15,7 +15,7 @@ metadata:
name: disk-fill-sa name: disk-fill-sa
rules: rules:
- apiGroups: ["","apps","litmuschaos.io","batch"] - apiGroups: ["","apps","litmuschaos.io","batch"]
resources: ["pods","jobs","pods/exec","events","pods/log","daemonsets","chaosengines","chaosexperiments","chaosresults"] resources: ["pods","jobs","pods/exec","events","pods/log","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"] verbs: ["create","list","get","patch","update","delete"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1

View File

@@ -16,7 +16,6 @@ spec:
- "apps" - "apps"
- "litmuschaos.io" - "litmuschaos.io"
resources: resources:
- "daemonsets"
- "jobs" - "jobs"
- "pods" - "pods"
- "pods/log" - "pods/log"

View File

@@ -22,7 +22,6 @@ spec:
- "events" - "events"
- "pods/log" - "pods/log"
- "pods/eviction" - "pods/eviction"
- "daemonsets"
- "chaosengines" - "chaosengines"
- "chaosexperiments" - "chaosexperiments"
- "chaosresults" - "chaosresults"

View File

@@ -15,7 +15,7 @@ metadata:
name: node-drain-sa name: node-drain-sa
rules: rules:
- apiGroups: ["","litmuschaos.io","batch","extensions"] - apiGroups: ["","litmuschaos.io","batch","extensions"]
resources: ["pods","jobs","events","chaosengines","pods/log","daemonsets","pods/eviction","chaosexperiments","chaosresults"] resources: ["pods","jobs","events","chaosengines","pods/log","pods/eviction","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"] verbs: ["create","list","get","patch","update","delete"]
- apiGroups: [""] - apiGroups: [""]
resources: ["nodes"] resources: ["nodes"]
@@ -35,4 +35,3 @@ subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: node-drain-sa name: node-drain-sa
namespace: default namespace: default

View File

@@ -22,7 +22,6 @@ spec:
- "openebs.io" - "openebs.io"
- "storage.k8s.io" - "storage.k8s.io"
resources: resources:
- "daemonsets"
- "replicasets" - "replicasets"
- "events" - "events"
- "jobs" - "jobs"

View File

@@ -16,7 +16,7 @@ metadata:
name: pool-container-failure-sa name: pool-container-failure-sa
rules: rules:
- apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"]
resources: ["pods","jobs","daemonsets","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] resources: ["pods","jobs","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
verbs: ["create","list","get","patch","update","delete"] verbs: ["create","list","get","patch","update","delete"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1

View File

@@ -20,7 +20,6 @@ spec:
- "litmuschaos.io" - "litmuschaos.io"
- "storage.k8s.io" - "storage.k8s.io"
resources: resources:
- "daemonsets"
- "jobs" - "jobs"
- "pods" - "pods"
- "events" - "events"

View File

@@ -16,7 +16,7 @@ metadata:
name: target-container-failure-sa name: target-container-failure-sa
rules: rules:
- apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"] - apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"]
resources: ["pods","jobs","pods/log","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] resources: ["pods","jobs","pods/log","pods/exec","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"] verbs: ["create","list","get","patch","update","delete"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1