Skip to content

Cleanup Helm RBAC#11486

Merged
istio-testing merged 7 commits intoistio:masterfrom
chrisob:cleanup_helm_rbac
Feb 7, 2019
Merged

Cleanup Helm RBAC#11486
istio-testing merged 7 commits intoistio:masterfrom
chrisob:cleanup_helm_rbac

Conversation

@chrisob
Copy link
Copy Markdown
Contributor

@chrisob chrisob commented Feb 1, 2019

Master branch changes related to #11234.

What started as a bug fix ended up as a general cleanup of Helm ClusterRole rules (biggest cleanup is in Kiali's chart).

@istio-testing
Copy link
Copy Markdown
Collaborator

Hi @chrisob. Thanks for your PR.

I'm waiting for a istio member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@chrisob
Copy link
Copy Markdown
Contributor Author

chrisob commented Feb 1, 2019

/assign @morvencao

Copy link
Copy Markdown
Member

@sdake sdake left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice contribution!

While you are in there can you change rbac to v1? Kubernetes has long been out of beta for rbac.

Cheers
-steve

@sdake
Copy link
Copy Markdown
Member

sdake commented Feb 5, 2019

/ok-to-test

@istio-testing istio-testing added ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. and removed needs-ok-to-test labels Feb 5, 2019
@chrisob
Copy link
Copy Markdown
Contributor Author

chrisob commented Feb 5, 2019

@sdake Glad to help, RBAC apiVersions updated to v1.

Just wondering, these failed CI tests aren't due to my changes, right? 🤔

@sdake
Copy link
Copy Markdown
Member

sdake commented Feb 6, 2019

@chrisob tewst-integatoin-kubernetes, istio-integ-k8s-tets.sh and istio-pilot-multicluster-e2e.sh are busted.

as for pilot-auth-v1alph3-v2 - unknown if this is because of your PR or not. I have not seen this gate failure signature prior, but that doesn't mean it doesn't exist :) I have rerun the workflow.

resources: ["configmaps", "endpoints", "pods", "services", "namespaces", "secrets", "replicationcontrollers"]
verbs: ["get", "list", "watch"]
- apiGroups: ["extensions"]
resources: ["replicasets"]
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

replicasets not needed for mixer?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sdake
Both the extensions and apps apiGroups contain a replicasets resource, so I merged this rule with the one below it (see - apiGroups: ["extensions", "apps"]).

@sdake
Copy link
Copy Markdown
Member

sdake commented Feb 6, 2019

if the PR fails to pass required circleci jobs, you might consider rebasing on master. circleci does not automatically rebase before running jobs.

Cheers
-steve

@chrisob
Copy link
Copy Markdown
Contributor Author

chrisob commented Feb 6, 2019

@morvencao look okay to you?

@morvencao
Copy link
Copy Markdown
Member

/LGTM

@istio-testing
Copy link
Copy Markdown
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: chrisob, morvencao

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@istio-testing
Copy link
Copy Markdown
Collaborator

@chrisob: The following tests failed, say /retest to rerun them all:

Test name Commit Details Rerun command
prow/istio-integ-k8s-tests.sh 135b630 link /test istio-integ-k8s-tests
prow/istio-pilot-multicluster-e2e.sh 135b630 link /test istio-pilot-multicluster-e2e
Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@istio-testing istio-testing merged commit 744be17 into istio:master Feb 7, 2019
@chrisob chrisob deleted the cleanup_helm_rbac branch February 7, 2019 20:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants