github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
3f2a02cf98
kubernetes/cluster
History
Kubernetes Submit Queue 3f2a02cf98 Merge pull request #39383 from liggitt/bind-check 
Automatic merge from submit-queue (batch tested with PRs 39694, 39383, 39651, 39691, 39497)

Allow rolebinding/clusterrolebinding with explicit bind permission check

Fixes https://github.com/kubernetes/kubernetes/issues/39176
Fixes https://github.com/kubernetes/kubernetes/issues/39258

Allows creating/updating a rolebinding/clusterrolebinding if the user has explicitly been granted permission to perform the "bind" verb against the referenced role/clusterrole (previously, they could only bind if they already had all the permissions in the referenced role via an RBAC role themselves)

```release-note
To create or update an RBAC RoleBinding or ClusterRoleBinding object, a user must:
1. Be authorized to make the create or update API request
2. Be allowed to bind the referenced role, either by already having all of the permissions contained in the referenced role, or by having the "bind" permission on the referenced role.
```
2017-01-10 21:25:13 -08:00
..
addons Merge pull request #39383 from liggitt/bind-check 2017-01-10 21:25:13 -08:00
aws Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
azure azure kube-up respects AZURE_RESOURCE_GROUP 2016-07-08 11:59:32 -07:00
azure-legacy Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
centos fix unpack docker.tar.gz failure bug 2017-01-06 00:17:36 +08:00
gce Merge pull request #38212 from mikedanese/kubeletauth 2017-01-10 19:48:09 -08:00
gke Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
images Always --pull in docker build to ensure recent base images 2017-01-10 16:21:05 -08:00
juju Update reference to dns sidecar (was dnsmasq-metrics); remove exec-healthz 2016-12-20 14:56:26 -08:00
kubemark Migrated kubemark master to GCI from Debian. 2016-12-19 13:51:56 +01:00
lib Add a verbosity concept to kubernetes scripts 2016-08-04 22:01:22 -07:00
libvirt-coreos adding local registry to libvirt_coreos 2016-12-19 07:51:46 +01:00
local Merge pull request #28469 from asalkeld/local-e2e 2016-09-11 05:44:47 -07:00
openstack-heat Merge pull request #38433 from yuanying/remove-needless-config 2017-01-03 23:28:07 -08:00
ovirt
photon-controller Migrates addons from using ReplicationControllers to Deployments 2016-11-09 09:17:05 -08:00
rackspace Migrates addons from using ReplicationControllers to Deployments 2016-11-09 09:17:05 -08:00
saltbase Merge pull request #38212 from mikedanese/kubeletauth 2017-01-10 19:48:09 -08:00
skeleton Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
ubuntu fix typo for cluster/* 2016-12-20 04:56:45 -08:00
vagrant Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
vsphere Update generated for 2017 2017-01-01 23:11:09 -08:00
BUILD Enable auto-generating sources rules 2017-01-05 14:14:13 -08:00
common.sh Merge pull request #38212 from mikedanese/kubeletauth 2017-01-10 19:48:09 -08:00
get-kube-binaries.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
get-kube-local.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
get-kube.sh Remove kube-up for vsphere 2016-12-22 20:15:37 +00:00
kube-down.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-push.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-up.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-util.sh [Federation][init-11] Switch federation e2e tests to use the new federation control plane bootstrap via the kubefed init command. 2016-12-16 11:22:44 +05:30
kubeadm.sh Cloning kubectl.sh logic into new kubeadm.sh. 2016-10-31 11:12:51 -07:00
kubectl.sh Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
log-dump.sh Added etcd-events to cluster logging 2017-01-06 10:28:48 +01:00
options.md Minion->Name rename: cluster/vagrant, docs and Vagrantfile 2015-12-02 12:45:12 -08:00
OWNERS Add jbeda to OWNERS for build, cluster, hack 2016-09-27 14:53:16 -07:00
README.md Fix typos and linted_packages sorting 2016-10-31 18:31:08 +01:00
restore-from-backup.sh Extend logging in restore-from-backup script 2016-12-21 15:10:47 +01:00
test-e2e.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-network.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-smoke.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
update-storage-objects.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
validate-cluster.sh Fixed cluster validation: added -q and project flags to gcloud. 2016-12-21 14:13:14 +01:00

README.md

Cluster Configuration

Deprecation Notice: This directory has entered maintenance mode and will not be accepting new providers. Please submit new automation deployments to kube-deploy. Deployments in this directory will continue to be maintained and supported at their current level of support.

The scripts and data in this directory automate creation and configuration of a Kubernetes cluster, including networking, DNS, nodes, and master components.

See the getting-started guides for examples of how to use the scripts.

cloudprovider/config-default.sh contains a set of tweakable definitions/parameters for the cluster.

The heavy lifting of configuring the VMs is done by SaltStack.

Analytics