k3s/pkg/registry/rbac
Monis Khan 543dcb6de5
Tolerate lack of namespace permissions in RBAC reconciliation
This change updates the RBAC reconciliation logic to not fail if the
user does not have the ability to create namespaces.  Thus if the
namespace already exists, the user only needs to pass the standard
escalation check for RBAC roles and role bindings.

Signed-off-by: Monis Khan <mkhan@redhat.com>
2018-10-29 11:30:04 -04:00
..
clusterrole dry-run: Create new options for Update/Create and pass it along 2018-07-12 07:18:37 -07:00
clusterrolebinding dry-run: Create new options for Update/Create and pass it along 2018-07-12 07:18:37 -07:00
reconciliation Tolerate lack of namespace permissions in RBAC reconciliation 2018-10-29 11:30:04 -04:00
rest Run hack/update-bazel.sh 2018-06-22 16:22:57 -07:00
role dry-run: Create new options for Update/Create and pass it along 2018-07-12 07:18:37 -07:00
rolebinding dry-run: Create new options for Update/Create and pass it along 2018-07-12 07:18:37 -07:00
validation make RBAC escalation error message more useful 2018-07-06 11:49:08 -04:00
BUILD Run hack/update-bazel.sh 2018-06-22 16:22:57 -07:00
OWNERS
escalation_check.go Allow non-RBAC authorizers to participate in role/clusterrole escalation checks 2018-06-06 15:31:05 -04:00
helpers.go GC: Add check for nil interface 2017-10-16 02:21:11 -04:00
helpers_test.go pkg/apis/core: mechanical import fixes in dependencies 2017-11-09 12:14:08 +01:00