weave-gitops
weave-gitops copied to clipboard
Fixes cluster admin querying
Closes
What changed?
Why was this change made?
How was this change implemented?
How did you validate the change?
Release notes
Documentation Changes
For reference this is what a SelfSubjectReviews response for cluster-admin looks like:
{
"metadata": { "creationTimestamp": null },
"spec": {},
"status": {
"resourceRules": [
{
"verbs": ["create"],
"apiGroups": ["authorization.k8s.io"],
"resources": ["selfsubjectaccessreviews", "selfsubjectrulesreviews"]
},
{ "verbs": ["*"], "apiGroups": ["*"], "resources": ["*"] }
],
"nonResourceRules": [
{
"verbs": ["get"],
"nonResourceURLs": [
"/healthz",
"/livez",
"/readyz",
"/version",
"/version/"
]
},
{
"verbs": ["get"],
"nonResourceURLs": [
"/api",
"/api/*",
"/apis",
"/apis/*",
"/healthz",
"/livez",
"/openapi",
"/openapi/*",
"/readyz",
"/version",
"/version/"
]
},
{ "verbs": ["*"], "nonResourceURLs": ["*"] }
],
"incomplete": true,
"evaluationError": "webhook authorizer does not support user rule resolution"
}
}
👍 would be great to have this merged, fixes some issues we're having with cluster access
@foot any plans to push this through?
Sorry! Got distracted. Will try and wrap this up for the next release