k3s/pkg
Kubernetes Submit Queue 01bfbb5fa0 Merge pull request #42259 from deads2k/rbac-07-reconcile-binding
Automatic merge from submit-queue

Add RBAC roles for bootstrap controllers

Supercedes https://github.com/kubernetes/kubernetes/pull/42221

When locking down controllers to individual RBAC roles we need to make sure that the bootstrap controllers have the right permissions.

This adds the roles and bindings at the correct namespace scopes for the bootstrap-signer and token-cleaner controllers.

@liggitt ptal
@jbeda @luxas you got a good way to test this?  It must not be covered in normal e2e or we'd've seen the issue before.
2017-03-01 16:57:51 -08:00
..
api Merge pull request #29378 from vefimova/docker_resolv 2017-03-01 14:19:08 -08:00
apimachinery/tests API 2017-02-28 23:05:40 -08:00
apis Merge pull request #42259 from deads2k/rbac-07-reconcile-binding 2017-03-01 16:57:51 -08:00
auth Update authn/authz owners and reviewers 2017-01-27 08:55:44 -05:00
bootstrap/api kubeadm: Implement the kubeadm token command fully and move it out of the experimental subsection 2017-02-27 12:56:03 +02:00
capabilities Fix comment for method SetForTests 2017-02-14 17:16:49 +08:00
client Generated changes for apps/v1beta1.deployments 2017-03-01 15:14:41 +01:00
cloudprovider AWS: run k8s master in different account or on a provider Currently the master and the nodes must run in the same account. With this change the master can run in a different AWS account or somewhere else. 2017-03-01 08:46:46 -08:00
controller Merge pull request #41824 from DirectXMan12/feature/hpa-v2-use-cm-api 2017-03-01 12:56:58 -08:00
conversion
credentialprovider
features Map nvidia devices one to one. 2017-02-28 13:42:08 -08:00
fieldpath Merge pull request #34533 from yuexiao-wang/fix-commends 2017-01-30 09:05:22 -08:00
fields
generated Added ability for Docker containers to set usage of dns settings along with hostNetwork is true 2017-03-01 17:10:00 +00:00
hyperkube
kubeapiserver tweak defaults for recommended apiserver options 2017-02-27 07:47:19 -05:00
kubectl Merge pull request #39683 from soltysh/move_deployments 2017-03-01 08:29:26 -08:00
kubelet Merge pull request #41753 from derekwaynecarr/burstable-cpu-shares 2017-03-01 15:30:34 -08:00
kubemark improve gpu integration 2017-02-28 11:27:53 -08:00
labels
master Deployments under apps/v1beta1 with new defaults 2017-03-01 15:14:41 +01:00
metrics Update to use proxy subresource consistently 2017-02-13 22:05:00 -05:00
printers Deployments under apps/v1beta1 with new defaults 2017-03-01 15:14:41 +01:00
probe Add support for attacher/detacher interface in Flex volume 2017-02-24 20:18:06 -05:00
proxy Merge pull request #29465 from DirectXMan12/feature/extensible-proxysocket 2017-03-01 09:17:29 -08:00
quota fix typo:evaluator 2017-02-27 09:28:40 +08:00
registry Merge pull request #42259 from deads2k/rbac-07-reconcile-binding 2017-03-01 16:57:51 -08:00
routes Update to use proxy subresource consistently 2017-02-13 22:05:00 -05:00
runtime
security Portworx Volume Driver in Kubernetes 2017-02-28 23:24:56 +00:00
securitycontext securitycontext: move docker-specific logic into kubelet/dockertools 2017-01-27 12:25:46 -08:00
serviceaccount Move Private Key parsing to k8s.io/client-go/util/cert 2017-02-03 17:41:34 -08:00
ssh
types
util Merge pull request #41618 from JiangtianLi/k8swin 2017-03-01 07:48:16 -08:00
version
volume Implement support for mount options in PVs 2017-03-01 11:50:40 -05:00
watch
BUILD Update bazel 2017-02-27 06:48:13 -05:00
OWNERS