typhoon/addons/cluo/cluster-role.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: reboot-coordinator
rules:
  - apiGroups:
      - ""
    resources:
      - nodes
    verbs:
      - get
      - list
      - watch
      - update
  - apiGroups:
      - ""
    resources:
      - configmaps
    verbs:
      - create
      - get
      - update
      - list
      - watch
  - apiGroups:
      - ""
    resources:
      - events
    verbs:
      - create
      - watch
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - get
      - list
      - delete
  - apiGroups:
      - "extensions"
    resources:
      - daemonsets
    verbs:
      - get
addons: Switch to apps/v1 workload APIs * Deployments now belong to the apps/v1 API group * DaemonSets now belong to the apps/v1 API group * RBAC types now belong to the rbac.authorization.k8s.io/v1 API group 2018-02-11 08:51:55 +01:00			`apiVersion: rbac.authorization.k8s.io/v1`
Add Container Linux reboot-coordinator RBAC * Add a reboot-coordinator namespace for CLUO components * Define an RBAC ClusterRole for update-operator and update-agent * Replace the older-style where CLUO ran in kube-system, with admin privilege 2017-10-15 04:35:06 +02:00			`kind: ClusterRole`
			`metadata:`
			`name: reboot-coordinator`
			`rules:`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- nodes`
			`verbs:`
			`- get`
			`- list`
			`- watch`
			`- update`
			`- apiGroups:`
			`- ""`
			`resources:`
Update CLUO addon to v0.4.0 and RBAC ClusterRole 2017-10-20 09:40:17 +02:00			`- configmaps`
Add Container Linux reboot-coordinator RBAC * Add a reboot-coordinator namespace for CLUO components * Define an RBAC ClusterRole for update-operator and update-agent * Replace the older-style where CLUO ran in kube-system, with admin privilege 2017-10-15 04:35:06 +02:00			`verbs:`
			`- create`
			`- get`
			`- update`
			`- list`
			`- watch`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- events`
			`verbs:`
			`- create`
			`- watch`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- pods`
			`verbs:`
Add missing update-agent RBAC role to get pods * Drain now gets pods, deletes pods, and waits for deletion 2017-10-20 10:21:46 +02:00			`- get`
Add Container Linux reboot-coordinator RBAC * Add a reboot-coordinator namespace for CLUO components * Define an RBAC ClusterRole for update-operator and update-agent * Replace the older-style where CLUO ran in kube-system, with admin privilege 2017-10-15 04:35:06 +02:00			`- list`
			`- delete`
			`- apiGroups:`
			`- "extensions"`
			`resources:`
			`- daemonsets`
			`verbs:`
			`- get`