Modify PodSecurityPolicy admission plugin to additionally allow authorizing via "use" verb in policy API group.

2018-02-21 18:16:00 +01:00
parent a4222bd8c3
commit 3d4fa8a189
3 changed files with 52 additions and 9 deletions
--- a/examples/podsecuritypolicy/rbac/roles.yaml
+++ b/examples/podsecuritypolicy/rbac/roles.yaml
@@ -5,7 +5,7 @@ metadata:
  name: restricted-psp-user
 rules:
 - apiGroups:
-  - extensions
+  - policy
  resources:
  - podsecuritypolicies
  resourceNames:
@@ -20,7 +20,7 @@ metadata:
  name: privileged-psp-user
 rules:
 - apiGroups:
-  - extensions
+  - policy
  resources:
  - podsecuritypolicies
  resourceNames: