8 Commits (46bfa1ee11bb2764eab34a39c7c622e7bbdee7e3)

Author	SHA1	Message	Date
Jordan Liggitt	264dbf0daf	Remove direct kubecfg RBAC grant	2017-01-16 14:12:15 -05:00
Jordan Liggitt	1fe517e96a	Include admin in super-user group	2017-01-11 17:20:42 -05:00
Kubernetes Submit Queue	3f2a02cf98	Merge pull request #39383 from liggitt/bind-check ... Automatic merge from submit-queue (batch tested with PRs 39694, 39383, 39651, 39691, 39497) Allow rolebinding/clusterrolebinding with explicit bind permission check Fixes https://github.com/kubernetes/kubernetes/issues/39176 Fixes https://github.com/kubernetes/kubernetes/issues/39258 Allows creating/updating a rolebinding/clusterrolebinding if the user has explicitly been granted permission to perform the "bind" verb against the referenced role/clusterrole (previously, they could only bind if they already had all the permissions in the referenced role via an RBAC role themselves) ```release-note To create or update an RBAC RoleBinding or ClusterRoleBinding object, a user must: 1. Be authorized to make the create or update API request 2. Be allowed to bind the referenced role, either by already having all of the permissions contained in the referenced role, or by having the "bind" permission on the referenced role. ```	2017-01-10 21:25:13 -08:00
Jordan Liggitt	6057a2ca76	Remove kubekins as cluster-admin	2017-01-10 14:34:33 -05:00
deads2k	60daaa3cca	fix e2e kubelet binding	2017-01-09 07:39:10 -05:00
Jeff Grafton	fae627dd65	Update generated for 2017	2017-01-01 23:11:09 -08:00
deads2k	7f2d33dfdf	add kubekins as cluster-admin	2016-12-22 09:32:00 -05:00
deads2k	19391164b9	add additional e2e rbac bindings to match existing users	2016-12-21 16:24:45 -05:00