Merge pull request #1008 from mgleung/add-l7-rbac

Add L7 access in RBAC and syslog types
tigera · Dec 15, 2020 · 04ab897 · 04ab897
2 parents c504411 + beadae1
commit 04ab897
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/api/v1/logcollector_types.go b/api/v1/logcollector_types.go
@@ -76,20 +76,23 @@ const (
 	SyslogLogAudit     SyslogLogType = "Audit"
 	SyslogLogDNS       SyslogLogType = "DNS"
 	SyslogLogFlows     SyslogLogType = "Flows"
+	SyslogLogL7        SyslogLogType = "L7"
 	SyslogLogIDSEvents SyslogLogType = "IDSEvents"
 )
 
 var SyslogLogTypes []SyslogLogType = []SyslogLogType{
 	SyslogLogAudit,
 	SyslogLogDNS,
 	SyslogLogFlows,
+	SyslogLogL7,
 	SyslogLogIDSEvents,
 }
 
 var SyslogLogTypesString []string = []string{
 	SyslogLogAudit.String(),
 	SyslogLogDNS.String(),
 	SyslogLogFlows.String(),
+	SyslogLogL7.String(),
 	SyslogLogIDSEvents.String(),
 }
 

diff --git a/pkg/render/apiserver.go b/pkg/render/apiserver.go
@@ -960,7 +960,7 @@ func (c *apiServerComponent) tigeraUserClusterRole() *rbacv1.ClusterRole {
 			APIGroups: []string{"lma.tigera.io"},
 			Resources: []string{"*"},
 			ResourceNames: []string{
-				"flows", "audit*", "events", "dns", "kibana_login",
+				"flows", "audit*", "l7", "events", "dns", "kibana_login",
 			},
 			Verbs: []string{"get"},
 		})
@@ -1082,7 +1082,7 @@ func (c *apiServerComponent) tigeraNetworkAdminClusterRole() *rbacv1.ClusterRole
 			APIGroups: []string{"lma.tigera.io"},
 			Resources: []string{"*"},
 			ResourceNames: []string{
-				"flows", "audit*", "events", "dns", "elasticsearch_superuser",
+				"flows", "audit*", "l7", "events", "dns", "elasticsearch_superuser",
 			},
 			Verbs: []string{"get"},
 		})

diff --git a/pkg/render/apiserver_test.go b/pkg/render/apiserver_test.go
@@ -774,7 +774,7 @@ var (
 			APIGroups: []string{"lma.tigera.io"},
 			Resources: []string{"*"},
 			ResourceNames: []string{
-				"flows", "audit*", "events", "dns", "kibana_login",
+				"flows", "audit*", "l7", "events", "dns", "kibana_login",
 			},
 			Verbs: []string{"get"},
 		},
@@ -862,7 +862,7 @@ var (
 			APIGroups: []string{"lma.tigera.io"},
 			Resources: []string{"*"},
 			ResourceNames: []string{
-				"flows", "audit*", "events", "dns", "elasticsearch_superuser",
+				"flows", "audit*", "l7", "events", "dns", "elasticsearch_superuser",
 			},
 			Verbs: []string{"get"},
 		},