Compare commits

...
3 Commits
Author SHA1 Message Date
Daniel FarrellandStephen Kitt fb66cc28b2 Name RBAC fields to match K8s requirements
The colon in these field names isn't allowed by K8s, and fails ct
linting. Use the new names from submariner-operator, which have already
been renamed to fix this.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
(cherry picked from commit c8b09b5c31)
2021-06-29 11:26:41 +02:00
Daniel FarrellandStephen Kitt e13cffdb4d Add required apiVersion field to Chart.yaml
This field is required by standard chart schemas. It should be v2 for
Charts that support Helm v3, as we do.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
(cherry picked from commit df86353f4b)
2021-06-29 11:26:41 +02:00
Steve MattarandStephen Kitt 6a0c5f2c29 fix(rbac): add missing cluster roles to submariner-operator
Signed-off-by: Steve Mattar <smattar@redhat.com>
(cherry picked from commit 12c8e9b3ff)
2021-06-29 11:26:41 +02:00
4 changed files with 10 additions and 5 deletions
+1
View File
@@ -1,6 +1,7 @@
--- ---
name: submariner-k8s-broker name: submariner-k8s-broker
version: 0.6.0 version: 0.6.0
apiVersion: v2
appVersion: 0.6.0 appVersion: 0.6.0
description: Submariner Kubernetes Broker description: Submariner Kubernetes Broker
keywords: keywords:
+4 -4
View File
@@ -2,7 +2,7 @@
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: Role kind: Role
metadata: metadata:
name: {{ template "submariner-k8s-broker.fullname" . }}:client name: {{ template "submariner-k8s-broker.fullname" . }}-cluster
labels: labels:
heritage: {{ .Release.Service | quote }} heritage: {{ .Release.Service | quote }}
release: {{ .Release.Name | quote }} release: {{ .Release.Name | quote }}
@@ -25,13 +25,13 @@ rules:
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
name: {{ template "submariner-k8s-broker.fullname" . }}:client name: {{ template "submariner-k8s-broker.fullname" . }}-cluster
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: Role kind: Role
name: {{ template "submariner-k8s-broker.fullname" . }}:client name: {{ template "submariner-k8s-broker.fullname" . }}-cluster
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }} name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
{{- end -}} {{- end -}}
+1
View File
@@ -1,6 +1,7 @@
--- ---
name: submariner-operator name: submariner-operator
version: 0.7.0 version: 0.7.0
apiVersion: v2
appVersion: 0.7.0 appVersion: 0.7.0
description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters
keywords: keywords:
+4 -1
View File
@@ -397,6 +397,7 @@ rules:
resources: resources:
- configmaps - configmaps
verbs: verbs:
- create
- get - get
- list - list
- watch - watch
@@ -411,11 +412,13 @@ rules:
- create - create
- update - update
- delete - delete
- apiGroups: # pods and services are looked up to figure out network settings - watch
- apiGroups: # pods, services and nodes are looked up to figure out network settings
- "" - ""
resources: resources:
- pods - pods
- services - services
- nodes
verbs: verbs:
- get - get
- list - list