From eebdeaa831592dcc6878419414f93a7ade3d96f1 Mon Sep 17 00:00:00 2001 From: Jon Donovan Date: Thu, 13 Feb 2020 17:50:40 -0800 Subject: [PATCH 1/2] Create the `source-observer` role before a binding. This is necessary when the installer of the eventing YAML does not have `bind` on all roles in the cluster. I've been prototyping an RBAC restriction that would grant `escalate` on all roles but not `bind` on all roles in the Operator RBAC. That adds some guard-rails that are currently missing, but requires this particular ordering to be correct. --- ...rver-clusterrole.yaml => 199-source-observer-clusterrole.yaml} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename config/{200-source-observer-clusterrole.yaml => 199-source-observer-clusterrole.yaml} (100%) diff --git a/config/200-source-observer-clusterrole.yaml b/config/199-source-observer-clusterrole.yaml similarity index 100% rename from config/200-source-observer-clusterrole.yaml rename to config/199-source-observer-clusterrole.yaml From e35c44c1144cb3d67c13cfda0a2691e9dbeba29c Mon Sep 17 00:00:00 2001 From: Jon Donovan Date: Fri, 14 Feb 2020 13:44:39 -0800 Subject: [PATCH 2/2] Move service accounts after all roles. --- ...rver-clusterrole.yaml => 200-source-observer-clusterrole.yaml} | 0 ...nting-serviceaccount.yaml => 201-eventing-serviceaccount.yaml} | 0 ...ebhook-serviceaccount.yaml => 201-webhook-serviceaccount.yaml} | 0 3 files changed, 0 insertions(+), 0 deletions(-) rename config/{199-source-observer-clusterrole.yaml => 200-source-observer-clusterrole.yaml} (100%) rename config/{200-eventing-serviceaccount.yaml => 201-eventing-serviceaccount.yaml} (100%) rename config/{200-webhook-serviceaccount.yaml => 201-webhook-serviceaccount.yaml} (100%) diff --git a/config/199-source-observer-clusterrole.yaml b/config/200-source-observer-clusterrole.yaml similarity index 100% rename from config/199-source-observer-clusterrole.yaml rename to config/200-source-observer-clusterrole.yaml diff --git a/config/200-eventing-serviceaccount.yaml b/config/201-eventing-serviceaccount.yaml similarity index 100% rename from config/200-eventing-serviceaccount.yaml rename to config/201-eventing-serviceaccount.yaml diff --git a/config/200-webhook-serviceaccount.yaml b/config/201-webhook-serviceaccount.yaml similarity index 100% rename from config/200-webhook-serviceaccount.yaml rename to config/201-webhook-serviceaccount.yaml