synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-13 21:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(helm): explode verbs instead of wildcarding (#7405)

Browse Source 
Updates the Helm chart role specification for Coder to explicitly list required verbs instead of requesting wildcard.
This commit is contained in:
Cian Johnston
2023-05-04 11:45:51 +01:00
committed by GitHub
parent b3689c8f64
commit b4d913e24f
5 changed files with 90 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
helm/templates/rbac.yaml
View File

@ -7,10 +7,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/default_values.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/labels_annotations.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/sa.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/tls.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1