This is an automated email from the ASF dual-hosted git repository. ashapkin pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/ignite.git
The following commit(s) were added to refs/heads/master by this push: new 15cce746f3d Improve the role binding, the permissions of ClusterRole are too high (#10574) 15cce746f3d is described below commit 15cce746f3d0ac1ad6c84bb2a1cbf98015928b35 Author: liyujue <18624049...@163.com> AuthorDate: Tue Apr 4 21:49:25 2023 +0800 Improve the role binding, the permissions of ClusterRole are too high (#10574) --- docs/_docs/code-snippets/k8s/cluster-role.yaml | 6 +++--- modules/kubernetes/config/az/ignite-account-role.yaml | 2 +- modules/kubernetes/config/az/ignite-role-binding.yaml | 4 ++-- modules/kubernetes/config/eks/ignite-account-role.yaml | 2 +- modules/kubernetes/config/eks/ignite-role-binding.yaml | 4 ++-- modules/kubernetes/config/gce/ignite-account-role.yaml | 2 +- modules/kubernetes/config/gce/ignite-role-binding.yaml | 4 ++-- 7 files changed, 12 insertions(+), 12 deletions(-) diff --git a/docs/_docs/code-snippets/k8s/cluster-role.yaml b/docs/_docs/code-snippets/k8s/cluster-role.yaml index 8d30884214c..08d8027efb1 100644 --- a/docs/_docs/code-snippets/k8s/cluster-role.yaml +++ b/docs/_docs/code-snippets/k8s/cluster-role.yaml @@ -15,7 +15,7 @@ #tag::config-block[] apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +kind: Role metadata: name: ignite namespace: ignite @@ -30,12 +30,12 @@ rules: - list - watch --- -kind: ClusterRoleBinding +kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: ignite roleRef: - kind: ClusterRole + kind: Role name: ignite apiGroup: rbac.authorization.k8s.io subjects: diff --git a/modules/kubernetes/config/az/ignite-account-role.yaml b/modules/kubernetes/config/az/ignite-account-role.yaml index 0071e431108..da0a9e2adc5 100644 --- a/modules/kubernetes/config/az/ignite-account-role.yaml +++ b/modules/kubernetes/config/az/ignite-account-role.yaml @@ -14,7 +14,7 @@ # limitations under the License. apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: ClusterRole +kind: Role metadata: name: ignite namespace: ignite diff --git a/modules/kubernetes/config/az/ignite-role-binding.yaml b/modules/kubernetes/config/az/ignite-role-binding.yaml index fdef0f07e1e..4ed383f0ad5 100644 --- a/modules/kubernetes/config/az/ignite-role-binding.yaml +++ b/modules/kubernetes/config/az/ignite-role-binding.yaml @@ -13,12 +13,12 @@ # See the License for the specific language governing permissions and # limitations under the License. -kind: ClusterRoleBinding +kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: name: ignite roleRef: - kind: ClusterRole + kind: Role name: ignite apiGroup: rbac.authorization.k8s.io subjects: diff --git a/modules/kubernetes/config/eks/ignite-account-role.yaml b/modules/kubernetes/config/eks/ignite-account-role.yaml index 0071e431108..da0a9e2adc5 100644 --- a/modules/kubernetes/config/eks/ignite-account-role.yaml +++ b/modules/kubernetes/config/eks/ignite-account-role.yaml @@ -14,7 +14,7 @@ # limitations under the License. apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: ClusterRole +kind: Role metadata: name: ignite namespace: ignite diff --git a/modules/kubernetes/config/eks/ignite-role-binding.yaml b/modules/kubernetes/config/eks/ignite-role-binding.yaml index fdef0f07e1e..4ed383f0ad5 100644 --- a/modules/kubernetes/config/eks/ignite-role-binding.yaml +++ b/modules/kubernetes/config/eks/ignite-role-binding.yaml @@ -13,12 +13,12 @@ # See the License for the specific language governing permissions and # limitations under the License. -kind: ClusterRoleBinding +kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: name: ignite roleRef: - kind: ClusterRole + kind: Role name: ignite apiGroup: rbac.authorization.k8s.io subjects: diff --git a/modules/kubernetes/config/gce/ignite-account-role.yaml b/modules/kubernetes/config/gce/ignite-account-role.yaml index 0071e431108..da0a9e2adc5 100644 --- a/modules/kubernetes/config/gce/ignite-account-role.yaml +++ b/modules/kubernetes/config/gce/ignite-account-role.yaml @@ -14,7 +14,7 @@ # limitations under the License. apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: ClusterRole +kind: Role metadata: name: ignite namespace: ignite diff --git a/modules/kubernetes/config/gce/ignite-role-binding.yaml b/modules/kubernetes/config/gce/ignite-role-binding.yaml index fdef0f07e1e..4ed383f0ad5 100644 --- a/modules/kubernetes/config/gce/ignite-role-binding.yaml +++ b/modules/kubernetes/config/gce/ignite-role-binding.yaml @@ -13,12 +13,12 @@ # See the License for the specific language governing permissions and # limitations under the License. -kind: ClusterRoleBinding +kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: name: ignite roleRef: - kind: ClusterRole + kind: Role name: ignite apiGroup: rbac.authorization.k8s.io subjects: