1. origin
  2. Commit 85019a366a2f95838ec52e7a0d2e57737dba04e0
Browse code

Update rules for upstream deployment rollbacks

Michail Kargakis authored on 2016/10/31 19:09:26
Showing 2 changed files
pkg/cmd/server/bootstrappolicy/policy.go
History View file @ 85019a3
... ... 
@@ -244,7 +244,7 @@ func GetBootstrapClusterRoles() []authorizationapi.ClusterRole {
244 244 
 				authorizationapi.NewRule(readWrite...).Groups(batchGroup).Resources("jobs", "scheduledjobs").RuleOrDie(),
245 245
246 246 
 				authorizationapi.NewRule(readWrite...).Groups(extensionsGroup).Resources("jobs", "horizontalpodautoscalers", "replicationcontrollers/scale",
247 
-					"replicasets", "replicasets/scale", "deployments", "deployments/scale").RuleOrDie(),
247 
+					"replicasets", "replicasets/scale", "deployments", "deployments/scale", "deployments/rollback").RuleOrDie(),
248 248 
 				authorizationapi.NewRule(read...).Groups(extensionsGroup).Resources("daemonsets").RuleOrDie(),
249 249
250 250 
 				authorizationapi.NewRule(readWrite...).Groups(appsGroup).Resources("petsets").RuleOrDie(),
... ... 
@@ -305,7 +305,7 @@ func GetBootstrapClusterRoles() []authorizationapi.ClusterRole {
305 305 
 				authorizationapi.NewRule(readWrite...).Groups(batchGroup).Resources("jobs", "scheduledjobs").RuleOrDie(),
306 306
307 307 
 				authorizationapi.NewRule(readWrite...).Groups(extensionsGroup).Resources("jobs", "horizontalpodautoscalers", "replicationcontrollers/scale",
308 
-					"replicasets", "replicasets/scale", "deployments", "deployments/scale").RuleOrDie(),
308 
+					"replicasets", "replicasets/scale", "deployments", "deployments/scale", "deployments/rollback").RuleOrDie(),
309 309 
 				authorizationapi.NewRule(read...).Groups(extensionsGroup).Resources("daemonsets").RuleOrDie(),
310 310
311 311 
 				authorizationapi.NewRule(readWrite...).Groups(appsGroup).Resources("petsets").RuleOrDie(),
test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml
History View file @ 85019a3
... ... 
@@ -575,6 +575,7 @@ items:
575 575 
     attributeRestrictions: null
576 576 
     resources:
577 577 
     - deployments
578 
+    - deployments/rollback
578 579 
     - deployments/scale
579 580 
     - horizontalpodautoscalers
580 581 
     - jobs
... ... 
@@ -977,6 +978,7 @@ items:
977 977 
     attributeRestrictions: null
978 978 
     resources:
979 979 
     - deployments
980 
+    - deployments/rollback
980 981 
     - deployments/scale
981 982 
     - horizontalpodautoscalers
982 983 
     - jobs