github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #117713 from flant/ssr-ga

Browse Source 
KEP-3325: Promote SelfSubjectReview to GA
This commit is contained in:
Kubernetes Prow Robot
2023-05-03 08:54:24 -07:00
committed by GitHub
parent f82a6ac72d 7c5573d326
commit 78833e1b33
30 changed files with 1416 additions and 112 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
View File

@@ -231,10 +231,7 @@ func ClusterRoles() []rbacv1.ClusterRole {
basicUserRules := []rbacv1.PolicyRule{
rbacv1helpers.NewRule("create").Groups(authorizationGroup).Resources("selfsubjectaccessreviews", "selfsubjectrulesreviews").RuleOrDie(),
}
if utilfeature.DefaultFeatureGate.Enabled(features.APISelfSubjectReview) {
basicUserRules = append(basicUserRules, rbacv1helpers.NewRule("create").Groups(authenticationGroup).Resources("selfsubjectreviews").RuleOrDie())
rbacv1helpers.NewRule("create").Groups(authenticationGroup).Resources("selfsubjectreviews").RuleOrDie(),
}
roles = append(roles, []rbacv1.ClusterRole{