apache / pulsar-helm-chart

Official Apache Pulsar Helm Chart
https://pulsar.apache.org/
Apache License 2.0
212 stars 224 forks source link

fix: update role: deployments and statefulsets belong to apiGroups "apps" #543

Closed yccharles closed 3 weeks ago

yccharles commented 1 month ago

Fixes # rbac role

Motivation

deployments and statefulsets belong to apiGroups "app"

If a user only have a namespace auth , Its will break down when helm install this chart . Because of wrong apiGroups.

"my-milvus-0-pulsar-broker-role" is forbidden: user "[xxxxxxxxx](mailto:milvus-storage@376054.sa)" (groups=["xxxxxxxx" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:[""], Resources:["deployments"], Verbs:["watch" "update" "create" "delete" "patch"]}
{APIGroups:[""], Resources:["statefulsets"], Verbs:["watch" "update" "create" "delete" "patch"]}
{APIGroups:["apps"], Resources:["pods"], Verbs:["list" "watch" "get" "update" "create" "delete" "patch"]}
{APIGroups:["apps"], Resources:["secrets"], Verbs:["list" "watch" "get" "update" "create" "delete" "patch"]}
{APIGroups:["apps"], Resources:["services"], Verbs:["list" "watch" "get" "update" "create" "delete" "patch"]}
{APIGroups:["extensions"], Resources:["pods"], Verbs:["list" "watch" "get" "update" "create" "delete" "patch"]}
{APIGroups:["extensions"], Resources:["secrets"], Verbs:["list" "watch" "get" "update" "create" "delete" "patch"]}
{APIGroups:["extensions"], Resources:["services"], Verbs:["list" "watch" "get" "update" "create" "delete" "patch"]}
{APIGroups:["extensions"], Resources:["statefulsets"], Verbs:["list" "watch" "get" "update" "create" "delete" "patch"]}

Modifications

Change role apiGroups. Delete extensions apiGroups

Verifying this change