selfhosted
/
coder
mirror of https://github.com/coder/coder.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix(helm): explode verbs instead of wildcarding (#7405) 

Updates the Helm chart role specification for Coder to explicitly list required verbs instead of requesting wildcard.
This commit is contained in:
Cian Johnston 2023-05-04 11:45:51 +01:00 committed by GitHub
parent b3689c8f64
commit b4d913e24f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 90 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
helm/templates/rbac.yaml
View File

@ -7,10 +7,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/default_values.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/labels_annotations.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/sa.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1

20
helm/tests/testdata/tls.golden vendored
View File

@ -22,10 +22,26 @@ metadata:
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["*"]
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
---
# Source: coder/templates/rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1