From adf5964897bd4d36cd653361a4e20d2b09640e39 Mon Sep 17 00:00:00 2001 From: Shubham Chaudhary Date: Thu, 2 Apr 2020 13:51:06 +0530 Subject: [PATCH] refactor(rbac): Removing extra resources from rbac (#199) Signed-off-by: shubhamchaudhary --- charts/generic/container-kill/experiment.yaml | 7 ------- charts/generic/container-kill/rbac.yaml | 3 --- charts/generic/container-kill/rbac_nginx_getstarted.yaml | 3 --- charts/generic/disk-fill/experiment.yaml | 7 ------- charts/generic/disk-fill/rbac.yaml | 3 --- charts/generic/pod-cpu-hog/experiment.yaml | 7 ------- charts/generic/pod-cpu-hog/rbac.yaml | 3 --- charts/generic/pod-network-corruption/experiment.yaml | 7 ------- charts/generic/pod-network-corruption/rbac.yaml | 3 --- charts/generic/pod-network-latency/experiment.yaml | 7 ------- charts/generic/pod-network-latency/rbac.yaml | 3 --- charts/generic/pod-network-loss/experiment.yaml | 7 ------- charts/generic/pod-network-loss/rbac.yaml | 3 --- .../openebs/openebs-pool-container-failure/experiment.yaml | 7 ------- charts/openebs/openebs-pool-container-failure/rbac.yaml | 3 --- charts/openebs/openebs-pool-network-delay/experiment.yaml | 7 ------- charts/openebs/openebs-pool-network-delay/rbac.yaml | 3 --- charts/openebs/openebs-pool-network-loss/experiment.yaml | 7 ------- charts/openebs/openebs-pool-network-loss/rbac.yaml | 3 --- .../openebs-target-container-failure/experiment.yaml | 7 ------- charts/openebs/openebs-target-container-failure/rbac.yaml | 3 --- .../openebs/openebs-target-network-delay/experiment.yaml | 7 ------- charts/openebs/openebs-target-network-delay/rbac.yaml | 3 --- charts/openebs/openebs-target-network-loss/experiment.yaml | 7 ------- charts/openebs/openebs-target-network-loss/rbac.yaml | 3 --- 25 files changed, 123 deletions(-) diff --git a/charts/generic/container-kill/experiment.yaml b/charts/generic/container-kill/experiment.yaml index 4be3906..927f484 100644 --- a/charts/generic/container-kill/experiment.yaml +++ b/charts/generic/container-kill/experiment.yaml @@ -31,13 +31,6 @@ spec: - "update" - "patch" - "delete" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/generic/container-kill/rbac.yaml b/charts/generic/container-kill/rbac.yaml index 874748d..e8adfb3 100644 --- a/charts/generic/container-kill/rbac.yaml +++ b/charts/generic/container-kill/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","litmuschaos.io","batch","apps"] resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding diff --git a/charts/generic/container-kill/rbac_nginx_getstarted.yaml b/charts/generic/container-kill/rbac_nginx_getstarted.yaml index a5d56d3..ebffeb7 100644 --- a/charts/generic/container-kill/rbac_nginx_getstarted.yaml +++ b/charts/generic/container-kill/rbac_nginx_getstarted.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","litmuschaos.io","batch","apps"] resources: ["pods","jobs","daemonsets","pods/exec","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding diff --git a/charts/generic/disk-fill/experiment.yaml b/charts/generic/disk-fill/experiment.yaml index b4dd604..08a589c 100644 --- a/charts/generic/disk-fill/experiment.yaml +++ b/charts/generic/disk-fill/experiment.yaml @@ -32,13 +32,6 @@ spec: - "patch" - "update" - "delete" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/generic/disk-fill/rbac.yaml b/charts/generic/disk-fill/rbac.yaml index 3b19e3d..fe8838b 100644 --- a/charts/generic/disk-fill/rbac.yaml +++ b/charts/generic/disk-fill/rbac.yaml @@ -17,9 +17,6 @@ rules: - apiGroups: ["","apps","litmuschaos.io","batch"] resources: ["pods","jobs","pods/exec","events","pods/log","daemonsets","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding diff --git a/charts/generic/pod-cpu-hog/experiment.yaml b/charts/generic/pod-cpu-hog/experiment.yaml index f31add5..72e7706 100644 --- a/charts/generic/pod-cpu-hog/experiment.yaml +++ b/charts/generic/pod-cpu-hog/experiment.yaml @@ -29,13 +29,6 @@ spec: - "patch" - "update" - "delete" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/generic/pod-cpu-hog/rbac.yaml b/charts/generic/pod-cpu-hog/rbac.yaml index 0d19381..bf8f8c3 100644 --- a/charts/generic/pod-cpu-hog/rbac.yaml +++ b/charts/generic/pod-cpu-hog/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","litmuschaos.io","batch"] resources: ["pods","jobs","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding diff --git a/charts/generic/pod-network-corruption/experiment.yaml b/charts/generic/pod-network-corruption/experiment.yaml index e221ae2..cfb46b1 100644 --- a/charts/generic/pod-network-corruption/experiment.yaml +++ b/charts/generic/pod-network-corruption/experiment.yaml @@ -29,13 +29,6 @@ spec: - "patch" - "update" - "get" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/generic/pod-network-corruption/rbac.yaml b/charts/generic/pod-network-corruption/rbac.yaml index affd71e..2bf6f83 100644 --- a/charts/generic/pod-network-corruption/rbac.yaml +++ b/charts/generic/pod-network-corruption/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","litmuschaos.io","batch"] resources: ["pods","jobs","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding diff --git a/charts/generic/pod-network-latency/experiment.yaml b/charts/generic/pod-network-latency/experiment.yaml index ccf5c14..6952618 100644 --- a/charts/generic/pod-network-latency/experiment.yaml +++ b/charts/generic/pod-network-latency/experiment.yaml @@ -29,13 +29,6 @@ spec: - "patch" - "update" - "delete" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/generic/pod-network-latency/rbac.yaml b/charts/generic/pod-network-latency/rbac.yaml index b2e5f4e..ef6be13 100644 --- a/charts/generic/pod-network-latency/rbac.yaml +++ b/charts/generic/pod-network-latency/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","litmuschaos.io","batch"] resources: ["pods","jobs","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding diff --git a/charts/generic/pod-network-loss/experiment.yaml b/charts/generic/pod-network-loss/experiment.yaml index 67127de..6daa6be 100644 --- a/charts/generic/pod-network-loss/experiment.yaml +++ b/charts/generic/pod-network-loss/experiment.yaml @@ -29,13 +29,6 @@ spec: - "create" - "update" - "delete" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/generic/pod-network-loss/rbac.yaml b/charts/generic/pod-network-loss/rbac.yaml index 4305931..4be813a 100644 --- a/charts/generic/pod-network-loss/rbac.yaml +++ b/charts/generic/pod-network-loss/rbac.yaml @@ -17,9 +17,6 @@ rules: - apiGroups: ["","litmuschaos.io","batch"] resources: ["pods","jobs","events","pods/log","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding diff --git a/charts/openebs/openebs-pool-container-failure/experiment.yaml b/charts/openebs/openebs-pool-container-failure/experiment.yaml index 4744aad..652037b 100644 --- a/charts/openebs/openebs-pool-container-failure/experiment.yaml +++ b/charts/openebs/openebs-pool-container-failure/experiment.yaml @@ -43,13 +43,6 @@ spec: - "list" - "patch" - "update" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/openebs/openebs-pool-container-failure/rbac.yaml b/charts/openebs/openebs-pool-container-failure/rbac.yaml index 3f374e6..6bec97c 100644 --- a/charts/openebs/openebs-pool-container-failure/rbac.yaml +++ b/charts/openebs/openebs-pool-container-failure/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] resources: ["pods","jobs","daemonsets","events","pods/log","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding diff --git a/charts/openebs/openebs-pool-network-delay/experiment.yaml b/charts/openebs/openebs-pool-network-delay/experiment.yaml index fe8c99c..ff8e029 100644 --- a/charts/openebs/openebs-pool-network-delay/experiment.yaml +++ b/charts/openebs/openebs-pool-network-delay/experiment.yaml @@ -45,13 +45,6 @@ spec: - "patch" - "update" - "delete" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/openebs/openebs-pool-network-delay/rbac.yaml b/charts/openebs/openebs-pool-network-delay/rbac.yaml index 1e92f02..6cc45ab 100644 --- a/charts/openebs/openebs-pool-network-delay/rbac.yaml +++ b/charts/openebs/openebs-pool-network-delay/rbac.yaml @@ -17,9 +17,6 @@ rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] resources: ["pods","pods/exec","pods/log","events","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding diff --git a/charts/openebs/openebs-pool-network-loss/experiment.yaml b/charts/openebs/openebs-pool-network-loss/experiment.yaml index 225fd70..3a52b53 100644 --- a/charts/openebs/openebs-pool-network-loss/experiment.yaml +++ b/charts/openebs/openebs-pool-network-loss/experiment.yaml @@ -45,13 +45,6 @@ spec: - "list" - "patch" - "update" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/openebs/openebs-pool-network-loss/rbac.yaml b/charts/openebs/openebs-pool-network-loss/rbac.yaml index 17e3c19..00d7f46 100644 --- a/charts/openebs/openebs-pool-network-loss/rbac.yaml +++ b/charts/openebs/openebs-pool-network-loss/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] resources: ["pods","pods/exec","pods/log","events","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding diff --git a/charts/openebs/openebs-target-container-failure/experiment.yaml b/charts/openebs/openebs-target-container-failure/experiment.yaml index 42c892f..097219c 100644 --- a/charts/openebs/openebs-target-container-failure/experiment.yaml +++ b/charts/openebs/openebs-target-container-failure/experiment.yaml @@ -41,13 +41,6 @@ spec: - "list" - "patch" - "update" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/openebs/openebs-target-container-failure/rbac.yaml b/charts/openebs/openebs-target-container-failure/rbac.yaml index 034f909..ea83e0e 100644 --- a/charts/openebs/openebs-target-container-failure/rbac.yaml +++ b/charts/openebs/openebs-target-container-failure/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"] resources: ["pods","jobs","pods/log","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding diff --git a/charts/openebs/openebs-target-network-delay/experiment.yaml b/charts/openebs/openebs-target-network-delay/experiment.yaml index 0e7680b..18fe5cc 100644 --- a/charts/openebs/openebs-target-network-delay/experiment.yaml +++ b/charts/openebs/openebs-target-network-delay/experiment.yaml @@ -41,13 +41,6 @@ spec: - "list" - "patch" - "update" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/openebs/openebs-target-network-delay/rbac.yaml b/charts/openebs/openebs-target-network-delay/rbac.yaml index c1e805c..132c255 100644 --- a/charts/openebs/openebs-target-network-delay/rbac.yaml +++ b/charts/openebs/openebs-target-network-delay/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] resources: ["pods","pods/exec","pods/log","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding diff --git a/charts/openebs/openebs-target-network-loss/experiment.yaml b/charts/openebs/openebs-target-network-loss/experiment.yaml index 0aef0ab..1e5b97f 100644 --- a/charts/openebs/openebs-target-network-loss/experiment.yaml +++ b/charts/openebs/openebs-target-network-loss/experiment.yaml @@ -41,13 +41,6 @@ spec: - "list" - "patch" - "update" - - apiGroups: - - "" - resources: - - "nodes" - verbs: - - "get" - - "list" image: "litmuschaos/ansible-runner:latest" args: - -c diff --git a/charts/openebs/openebs-target-network-loss/rbac.yaml b/charts/openebs/openebs-target-network-loss/rbac.yaml index 8188cb7..818a699 100644 --- a/charts/openebs/openebs-target-network-loss/rbac.yaml +++ b/charts/openebs/openebs-target-network-loss/rbac.yaml @@ -18,9 +18,6 @@ rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] resources: ["pods","pods/exec","pods/log","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] -- apiGroups: [""] - resources: ["nodes"] - verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding