Commits on Sep 30, 2017

1. Correct APIGroup for RoleBindingBuilder Subjects …

   This change corrects RoleBindingBuilder to use the RBAC API group
   with users and groups as subjects (service accounts use the empty
   string since they are in the legacy core group).  This is based on
   the defaulting in pkg/apis/rbac/v1/defaults.go#SetDefaults_Subject.
   This is required because the bootstrap RBAC data is built with these
   helpers and does not go through defaulting, whereas the data
   retrieved from the server has already gone through defaulting.  This
   can lead to the reconciliation code incorrectly adding duplicate
   subjects because it believes that they are missing (since the API
   groups do not match).
   
   Signed-off-by: Monis Khan <mkhan@redhat.com>

   

   enj committed Sep 30, 2017
   Configuration menu

   • View commit details
   • Copy full SHA for 5eb5b3e
   • Browse repository at this point

   Copy the full SHA

   5eb5b3e View commit details

   Browse the repository at this point in the history