synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-15 22:20:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(helm): explode verbs instead of wildcarding (#7405)

Browse Source 
Updates the Helm chart role specification for Coder to explicitly list required verbs instead of requesting wildcard.
This commit is contained in:
Cian Johnston
2023-05-04 11:45:51 +01:00
committed by GitHub
parent b3689c8f64
commit b4d913e24f
5 changed files with 90 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
helm/templates/rbac.yaml
View File

@ -7,10 +7,26 @@ metadata:
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumeclaims"] resources: ["persistentvolumeclaims"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/default_values.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumeclaims"] resources: ["persistentvolumeclaims"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
--- ---
# Source: coder/templates/rbac.yaml # Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/labels_annotations.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumeclaims"] resources: ["persistentvolumeclaims"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
--- ---
# Source: coder/templates/rbac.yaml # Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/sa.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumeclaims"] resources: ["persistentvolumeclaims"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
--- ---
# Source: coder/templates/rbac.yaml # Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/tls.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumeclaims"] resources: ["persistentvolumeclaims"]
verbs: ["*"] verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
--- ---
# Source: coder/templates/rbac.yaml # Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1