mirror of
https://github.com/vmware-tanzu/pinniped.git
synced 2026-01-08 23:23:39 +00:00
LoginRequest -> CredentialRequest
- We want to follow the <noun>Request convention. - The actual operation does not login a user, but it does retrieve a credential with which they can login. - This commit includes changes to all LoginRequest-related symbols and constants to try to update their names to follow the new CredentialRequest type. Signed-off-by: Andrew Keesler <akeesler@vmware.com>
This commit is contained in:
@@ -62,21 +62,21 @@ roleRef:
|
||||
name: #@ data.values.app_name + "-aggregated-api-server-role"
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
|
||||
#! Allow both authenticated and unauthenticated LoginRequests (i.e. allow all requests)
|
||||
#! Allow both authenticated and unauthenticated CredentialRequests (i.e. allow all requests)
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: #@ data.values.app_name + "-loginrequests-cluster-role"
|
||||
name: #@ data.values.app_name + "-credentialrequests-cluster-role"
|
||||
rules:
|
||||
- apiGroups: [placeholder.suzerain-io.github.io]
|
||||
resources: [loginrequests]
|
||||
resources: [credentialrequests]
|
||||
verbs: [create]
|
||||
---
|
||||
kind: ClusterRoleBinding
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: #@ data.values.app_name + "-loginrequests-cluster-role-binding"
|
||||
name: #@ data.values.app_name + "-credentialrequests-cluster-role-binding"
|
||||
subjects:
|
||||
- kind: Group
|
||||
name: system:authenticated
|
||||
@@ -86,7 +86,7 @@ subjects:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: #@ data.values.app_name + "-loginrequests-cluster-role"
|
||||
name: #@ data.values.app_name + "-credentialrequests-cluster-role"
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
|
||||
#! Give permissions for subjectaccessreviews, tokenreview that is needed by aggregated api servers
|
||||
|
||||
Reference in New Issue
Block a user