UPSTREAM: <carry>: Remove write permissions on daemonsets from Kubern…

…etes bootstrap policy Due to how daemonsets interact with the project node selector, we need to limit write access to them to the cluster admin. Bug 1536304 Bug 1501514 Signed-off-by: Monis Khan <[email protected]>
openshift · Mar 13, 2018 · 087d766 · 087d766
1 parent b1e22b3
commit 087d766
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 8 deletions.
diff --git a/vendor/k8s.io/kubernetes/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go b/vendor/k8s.io/kubernetes/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
diff --git a/...io/kubernetes/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml b/...io/kubernetes/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml