Skip to content

Commit

Permalink
Merge pull request #164 from bjwswang/main
Browse files Browse the repository at this point in the history
fix: missing required permissions for resource-reader and remove apiv…
  • Loading branch information
bjwswang authored Feb 20, 2024
2 parents 5288790 + 3dfa12b commit 1c6e60d
Show file tree
Hide file tree
Showing 4 changed files with 45 additions and 14 deletions.
2 changes: 1 addition & 1 deletion charts/component-store/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ apiVersion: v2
name: component-store
description: Component store to list, view and deploy various components.
type: application
version: 0.0.2
version: 0.0.23
icon: https://avatars.githubusercontent.com/u/85277200
keywords:
- kubebb
Expand Down
31 changes: 31 additions & 0 deletions charts/component-store/templates/resource-rbac.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: kubebb-resource-reader
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- apiGroups:
- "core.kubebb.k8s.com.cn"
resources:
- ratings
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: kubebb-resource-reader
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: kubebb-resource-reader
subjects:
- kind: Group
name: resource-reader
2 changes: 1 addition & 1 deletion charts/kubebb-core/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ annotations:
core.kubebb.k8s.com.cn/restricted-namespaces: "kubebb-system"
description: Kubebb Core provides core implementations on Component Lifecycle Management.Our design and development follows operator pattern which extends kubernetes APIs.
type: application
version: v0.1.25
version: v0.1.26
appVersion: v0.1.6
icon: https://avatars.githubusercontent.com/u/85277200
keywords:
Expand Down
24 changes: 12 additions & 12 deletions charts/kubebb-core/templates/role_template.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ spec:
displayName: 安装计划
rules:
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- componentplans
verbs:
Expand All @@ -26,7 +26,7 @@ spec:
- patch
- update
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- componentplans/status
verbs:
Expand All @@ -35,14 +35,14 @@ spec:
displayName: 组件
rules:
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- components
verbs:
- get
- list
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- components/status
verbs:
Expand All @@ -51,7 +51,7 @@ spec:
displayName: 订阅计划
rules:
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- subscriptions
verbs:
Expand All @@ -62,7 +62,7 @@ spec:
- patch
- update
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- subscriptions/status
verbs:
Expand All @@ -85,14 +85,14 @@ spec:
displayName: 仓库
rules:
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- repositories
verbs:
- get
- list
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- repositories/status
verbs:
Expand All @@ -101,7 +101,7 @@ spec:
displayName: 安装计划
rules:
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- componentplans
verbs:
Expand All @@ -112,7 +112,7 @@ spec:
- patch
- update
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- componentplans/status
verbs:
Expand All @@ -121,7 +121,7 @@ spec:
displayName: 订阅计划
rules:
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- subscriptions
verbs:
Expand All @@ -132,7 +132,7 @@ spec:
- patch
- update
- apiGroups:
- core.kubebb.k8s.com.cn/v1alpha1
- core.kubebb.k8s.com.cn
resources:
- subscriptions/status
verbs:
Expand Down

0 comments on commit 1c6e60d

Please sign in to comment.