github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

kubeadm: fix uninvalid namespace field for clusterrole

Browse Source 
Signed-off-by: xin.li <xin.li@daocloud.io>
This commit is contained in:
xin.li
2023-10-15 18:46:29 +08:00
parent 8e8ac86cf1
commit 6732c4110f
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/kubeadm/app/phases/bootstraptoken/node/tlsbootstrap.go
View File

@@ -56,7 +56,6 @@ func AllowBoostrapTokensToGetNodes(client clientset.Interface) error {
if err := apiclient.CreateOrUpdateClusterRole(client, &rbac.ClusterRole{ if err := apiclient.CreateOrUpdateClusterRole(client, &rbac.ClusterRole{
ObjectMeta: metav1.ObjectMeta{ ObjectMeta: metav1.ObjectMeta{
Name: constants.GetNodesClusterRoleName, Name: constants.GetNodesClusterRoleName,
Namespace: metav1.NamespaceSystem,
}, },
Rules: []rbac.PolicyRule{ Rules: []rbac.PolicyRule{
{ {
@@ -72,7 +71,6 @@ func AllowBoostrapTokensToGetNodes(client clientset.Interface) error {
return apiclient.CreateOrUpdateClusterRoleBinding(client, &rbac.ClusterRoleBinding{ return apiclient.CreateOrUpdateClusterRoleBinding(client, &rbac.ClusterRoleBinding{
ObjectMeta: metav1.ObjectMeta{ ObjectMeta: metav1.ObjectMeta{
Name: constants.GetNodesClusterRoleName, Name: constants.GetNodesClusterRoleName,
Namespace: metav1.NamespaceSystem,
}, },
RoleRef: rbac.RoleRef{ RoleRef: rbac.RoleRef{
APIGroup: rbac.GroupName, APIGroup: rbac.GroupName,