Merge pull request #17874 from deads2k/rbac-06-permission

Automatic merge from submit-queue (batch tested with PRs 17744, 17840, 17874).

add swagger permissions

Fixes permission problem from #17872

/assign php-coder
/assign simo5

@openshift/sig-security 

@php-coder see if this gets you to the next failure.

pkg/authorization/apis/authorization/types.go

@@ -51,7 +51,7 @@ var DiscoveryRule = rbac.PolicyRule{
 		"/api", "/api/*",
 		"/apis", "/apis/*",
 		"/oapi", "/oapi/*",
-		"/swaggerapi", "/swaggerapi/*", "/swagger.json",
+		"/swaggerapi", "/swaggerapi/*", "/swagger.json", "/swagger-2.0.0.pb-v1",
 		"/osapi", "/osapi/", // these cannot be removed until we can drop support for pre 3.1 clients
 		"/.well-known", "/.well-known/*",
 

test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml

@@ -1780,6 +1780,7 @@ items:
     - /swaggerapi
     - /swaggerapi/*
     - /swagger.json
+    - /swagger-2.0.0.pb-v1
     - /osapi
     - /osapi/
     - /.well-known
@@ -2502,6 +2503,7 @@ items:
     - /swaggerapi
     - /swaggerapi/*
     - /swagger.json
+    - /swagger-2.0.0.pb-v1
     - /osapi
     - /osapi/
     - /.well-known

test/testdata/bootstrappolicy/bootstrap_policy_file.yaml

@@ -1942,6 +1942,7 @@ items:
     - /oapi/*
     - /osapi
     - /osapi/
+    - /swagger-2.0.0.pb-v1
     - /swagger.json
     - /swaggerapi
     - /swaggerapi/*
@@ -2738,6 +2739,7 @@ items:
     - /oapi/*
     - /osapi
     - /osapi/
+    - /swagger-2.0.0.pb-v1
     - /swagger.json
     - /swaggerapi
     - /swaggerapi/*