Fixed RBAC test and moved the new map to the openshift-config-managed namespace
@@ -116,7 +116,6 @@ var (
rbacv1helpers.NewRule("get", "list").Groups(storageGroup).Resources("storageclasses").RuleOrDie(),
rbacv1helpers.NewRule("get", "list", "watch").Groups(snapshotGroup).Resources("volumesnapshotclasses").RuleOrDie(),
rbacv1helpers.NewRule("list", "watch").Groups(projectGroup, legacyProjectGroup).Resources("projects").RuleOrDie(),
- rbacv1helpers.NewRule("get").Groups("").Resources("configmaps").Names("openshift-network-features").RuleOrDie(),
// These custom resources are used to extend console functionality
// The console team is working on eliminating this exception in the near future
@@ -158,7 +157,7 @@ var (
},
"openshift-config-managed": {
rbacv1helpers.NewRule("get").Groups(legacyGroup).Resources("configmaps").Names("console-public").RuleOrDie(),
- rbacv1helpers.NewRule(read...).Groups("").Resources("configmaps").Names("oauth-serving-cert").RuleOrDie(),
+ rbacv1helpers.NewRule(read...).Groups("").Resources("configmaps").Names("oauth-serving-cert", "openshift-network-features").RuleOrDie(),
},
"kube-system": {
// this allows every authenticated user to use in-cluster client certificate termination
