Kaushal M 2e274b306a ceph: Use aggregated ClusterRoles ...

The ClusterRoles in the manifests (and helm chart) for the ceph provider
have been updated to use [aggregated ClusterRoles][1].

All ClusterRoles have been split into 2 ClusterRoles.
An aggregated ClusterRole without any rules, named the same, but with an
aggregationRule that matches labels in the format
'rbac.ceph.rook.io/aggregate-to-<ClusterRole name>: "true"'.
A second ClusterRole which contains the existing rules named
'<ClusterRole name>-rules', with label
'rbac.ceph.rook.io/aggregate-to-<ClusterRole name>: "true"'.

These two ClusterRoles give the same behaviour as the previous
ClusterRole.

Additional rules to a ClusterRole can now be provided by creating a new
ClusterRole with the correct label. This should help make updates
simpler.

Fixes #2634.

[1]: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles

Signed-off-by: Kaushal M <kshlmster@gmail.com>

2019-04-17 13:00:21 +05:30

..

clients

k8sclient: Update all operators to use apps/v1

2019-04-12 09:25:42 +02:00

installer

ceph: Use aggregated ClusterRoles

2019-04-17 13:00:21 +05:30

utils

tests: retry the file mount integration test for stability

2019-03-12 17:30:06 -06:00