Removing daemonset permission from the charts (#201)
Signed-off-by: Raj <raj.das@mayadata.io>
This commit is contained in:
@@ -15,7 +15,6 @@ spec:
|
||||
- "batch"
|
||||
- "litmuschaos.io"
|
||||
resources:
|
||||
- "daemonsets"
|
||||
- "jobs"
|
||||
- "pods"
|
||||
- "pods/log"
|
||||
|
@@ -16,7 +16,7 @@ metadata:
|
||||
name: container-kill-sa
|
||||
rules:
|
||||
- apiGroups: ["","litmuschaos.io","batch","apps"]
|
||||
resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
|
||||
resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
|
||||
verbs: ["create","list","get","patch","update","delete"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||
|
@@ -16,7 +16,7 @@ metadata:
|
||||
name: container-kill-sa
|
||||
rules:
|
||||
- apiGroups: ["","litmuschaos.io","batch","apps"]
|
||||
resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
|
||||
resources: ["pods","jobs","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"]
|
||||
verbs: ["create","list","get","patch","update","delete"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||
|
@@ -21,7 +21,6 @@ spec:
|
||||
- "pods/exec"
|
||||
- "pods/log"
|
||||
- "events"
|
||||
- "daemonsets"
|
||||
- "chaosengines"
|
||||
- "chaosexperiments"
|
||||
- "chaosresults"
|
||||
@@ -58,5 +57,3 @@ spec:
|
||||
|
||||
labels:
|
||||
name: disk-fill
|
||||
|
||||
|
||||
|
@@ -15,7 +15,7 @@ metadata:
|
||||
name: disk-fill-sa
|
||||
rules:
|
||||
- apiGroups: ["","apps","litmuschaos.io","batch"]
|
||||
resources: ["pods","jobs","pods/exec","events","pods/log","daemonsets","chaosengines","chaosexperiments","chaosresults"]
|
||||
resources: ["pods","jobs","pods/exec","events","pods/log","chaosengines","chaosexperiments","chaosresults"]
|
||||
verbs: ["create","list","get","patch","update","delete"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||
|
@@ -16,7 +16,6 @@ spec:
|
||||
- "apps"
|
||||
- "litmuschaos.io"
|
||||
resources:
|
||||
- "daemonsets"
|
||||
- "jobs"
|
||||
- "pods"
|
||||
- "pods/log"
|
||||
|
@@ -22,7 +22,6 @@ spec:
|
||||
- "events"
|
||||
- "pods/log"
|
||||
- "pods/eviction"
|
||||
- "daemonsets"
|
||||
- "chaosengines"
|
||||
- "chaosexperiments"
|
||||
- "chaosresults"
|
||||
|
@@ -15,7 +15,7 @@ metadata:
|
||||
name: node-drain-sa
|
||||
rules:
|
||||
- apiGroups: ["","litmuschaos.io","batch","extensions"]
|
||||
resources: ["pods","jobs","events","chaosengines","pods/log","daemonsets","pods/eviction","chaosexperiments","chaosresults"]
|
||||
resources: ["pods","jobs","events","chaosengines","pods/log","pods/eviction","chaosexperiments","chaosresults"]
|
||||
verbs: ["create","list","get","patch","update","delete"]
|
||||
- apiGroups: [""]
|
||||
resources: ["nodes"]
|
||||
@@ -35,4 +35,3 @@ subjects:
|
||||
- kind: ServiceAccount
|
||||
name: node-drain-sa
|
||||
namespace: default
|
||||
|
||||
|
@@ -22,7 +22,6 @@ spec:
|
||||
- "openebs.io"
|
||||
- "storage.k8s.io"
|
||||
resources:
|
||||
- "daemonsets"
|
||||
- "replicasets"
|
||||
- "events"
|
||||
- "jobs"
|
||||
|
@@ -16,7 +16,7 @@ metadata:
|
||||
name: pool-container-failure-sa
|
||||
rules:
|
||||
- apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"]
|
||||
resources: ["pods","jobs","daemonsets","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
|
||||
resources: ["pods","jobs","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
|
||||
verbs: ["create","list","get","patch","update","delete"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||
|
@@ -20,7 +20,6 @@ spec:
|
||||
- "litmuschaos.io"
|
||||
- "storage.k8s.io"
|
||||
resources:
|
||||
- "daemonsets"
|
||||
- "jobs"
|
||||
- "pods"
|
||||
- "events"
|
||||
|
@@ -16,7 +16,7 @@ metadata:
|
||||
name: target-container-failure-sa
|
||||
rules:
|
||||
- apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"]
|
||||
resources: ["pods","jobs","pods/log","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"]
|
||||
resources: ["pods","jobs","pods/log","pods/exec","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"]
|
||||
verbs: ["create","list","get","patch","update","delete"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||
|
Reference in New Issue
Block a user