Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add parity check for Openshift policy and Kube RBAC #14429

Merged
merged 3 commits into from
Jun 12, 2017
Merged

Add parity check for Openshift policy and Kube RBAC #14429

merged 3 commits into from
Jun 12, 2017

Commits on Jun 10, 2017

  1. Add parity check for Openshift authz and Kube RBAC 

    This change adds the `oadm migrate authorization` command:

A controller is used to keep Openshift authorization objects and
Kubernetes RBAC in sync.  This command checks for parity between those
objects across all namespaces and reports all objects that are out of
sync.  These objects require manual intervention to sync as the
controller handles all cases where automatic sync is possible.

The following resource types are checked by this command:

* clusterrole
* role
* clusterrolebinding
* rolebinding

No resources are mutated.

Signed-off-by: Monis Khan <[email protected]>
    @enj
    enj committed Jun 10, 2017
    Configuration menu
    Copy the full SHA
    b95d4a0 View commit details
    Browse the repository at this point in the history

  2. Generate: oadm migrate authorization 

    Signed-off-by: Monis Khan <[email protected]>
    @enj
    enj committed Jun 10, 2017
    Configuration menu
    Copy the full SHA
    684d4b4 View commit details
    Browse the repository at this point in the history

  3. Collapse code between authorizationsync and migrate 

    This change adds functions that handle all normalization, conversion and
comparison for the authorization objects.  These are now shared between
authorizationsync and `oadm migrate authorization` to prevent any logic
drift.

Signed-off-by: Monis Khan <[email protected]>
    @enj
    enj committed Jun 10, 2017
    Configuration menu
    Copy the full SHA
    46af0f1 View commit details
    Browse the repository at this point in the history