From f2f6564f61c1e82a00e4c286545839ad9bd0b67d Mon Sep 17 00:00:00 2001 From: Shubham Chaudhary Date: Thu, 15 Apr 2021 21:17:49 +0530 Subject: [PATCH] chore(disk-fill): converting disk-fill RBAC to Role from ClusterRole (#441) Signed-off-by: shubhamchaudhary --- charts/generic/disk-fill/experiment.yaml | 2 +- charts/generic/disk-fill/rbac-psp.yaml | 8 +++++--- charts/generic/disk-fill/rbac.yaml | 8 +++++--- 3 files changed, 11 insertions(+), 7 deletions(-) diff --git a/charts/generic/disk-fill/experiment.yaml b/charts/generic/disk-fill/experiment.yaml index 94c734a..cb85253 100644 --- a/charts/generic/disk-fill/experiment.yaml +++ b/charts/generic/disk-fill/experiment.yaml @@ -12,7 +12,7 @@ metadata: app.kubernetes.io/version: latest spec: definition: - scope: Cluster + scope: Namespaced permissions: - apiGroups: - "" diff --git a/charts/generic/disk-fill/rbac-psp.yaml b/charts/generic/disk-fill/rbac-psp.yaml index d7918b4..3e56296 100644 --- a/charts/generic/disk-fill/rbac-psp.yaml +++ b/charts/generic/disk-fill/rbac-psp.yaml @@ -9,9 +9,10 @@ metadata: app.kubernetes.io/part-of: litmus --- apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +kind: Role metadata: name: disk-fill-sa + namespace: default labels: name: disk-fill-sa app.kubernetes.io/part-of: litmus @@ -43,15 +44,16 @@ rules: resourceNames: ["litmus"] --- apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding +kind: RoleBinding metadata: name: disk-fill-sa + namespace: default labels: name: disk-fill-sa app.kubernetes.io/part-of: litmus roleRef: apiGroup: rbac.authorization.k8s.io - kind: ClusterRole + kind: Role name: disk-fill-sa subjects: - kind: ServiceAccount diff --git a/charts/generic/disk-fill/rbac.yaml b/charts/generic/disk-fill/rbac.yaml index c542021..116e10a 100644 --- a/charts/generic/disk-fill/rbac.yaml +++ b/charts/generic/disk-fill/rbac.yaml @@ -9,9 +9,10 @@ metadata: app.kubernetes.io/part-of: litmus --- apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +kind: Role metadata: name: disk-fill-sa + namespace: default labels: name: disk-fill-sa app.kubernetes.io/part-of: litmus @@ -39,15 +40,16 @@ rules: verbs: ["create","list","get","patch","update"] --- apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding +kind: RoleBinding metadata: name: disk-fill-sa + namespace: default labels: name: disk-fill-sa app.kubernetes.io/part-of: litmus roleRef: apiGroup: rbac.authorization.k8s.io - kind: ClusterRole + kind: Role name: disk-fill-sa subjects: - kind: ServiceAccount