Skip to content

Instantly share code, notes, and snippets.

@pweil-

pweil-/1. version

Created December 12, 2018 15:36
Show Gist options
  • Save pweil-/d010a1f76d5c37b113ba4a4d1b16ea92 to your computer and use it in GitHub Desktop.
Save pweil-/d010a1f76d5c37b113ba4a4d1b16ea92 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
1. version
[pweil@pweil-fedora openshift-azure]$ oc version
oc v4.0.0-alpha.0+02f888e-285
kubernetes v1.11.0+d4cacc0
features: Basic-Auth GSSAPI Kerberos SPNEGO
Server https://pweilosa.eastus.cloudapp.azure.com
openshift v3.11.43
kubernetes v1.11.0+d4cacc0
Raw
2. permissions
[pweil@pweil-fedora openshift-azure]$ oc describe clusterrole.rbac cluster-reader
Name: cluster-reader
Labels: <none>
Annotations: authorization.openshift.io/system-only=true
rbac.authorization.kubernetes.io/autoupdate=true
PolicyRule:
Resources Non-Resource URLs Resource Names Verbs
--------- ----------------- -------------- -----
nodes/stats [] [] [create get]
localresourceaccessreviews [] [] [create]
localsubjectaccessreviews [] [] [create]
podsecuritypolicyreviews [] [] [create]
podsecuritypolicyselfsubjectreviews [] [] [create]
podsecuritypolicysubjectreviews [] [] [create]
resourceaccessreviews [] [] [create]
selfsubjectrulesreviews [] [] [create]
subjectaccessreviews [] [] [create]
subjectrulesreviews [] [] [create]
tokenreviews.authentication.k8s.io [] [] [create]
localsubjectaccessreviews.authorization.k8s.io [] [] [create]
selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
selfsubjectrulesreviews.authorization.k8s.io [] [] [create]
subjectaccessreviews.authorization.k8s.io [] [] [create]
localresourceaccessreviews.authorization.openshift.io [] [] [create]
localsubjectaccessreviews.authorization.openshift.io [] [] [create]
resourceaccessreviews.authorization.openshift.io [] [] [create]
selfsubjectrulesreviews.authorization.openshift.io [] [] [create]
subjectaccessreviews.authorization.openshift.io [] [] [create]
subjectrulesreviews.authorization.openshift.io [] [] [create]
podsecuritypolicyreviews.security.openshift.io [] [] [create]
podsecuritypolicyselfsubjectreviews.security.openshift.io [] [] [create]
podsecuritypolicysubjectreviews.security.openshift.io [] [] [create]
securitycontextconstraints [] [] [get list watch get list watch]
appliedclusterresourcequotas [] [] [get list watch]
bindings [] [] [get list watch]
brokertemplateinstances [] [] [get list watch]
buildconfigs/webhooks [] [] [get list watch]
buildconfigs [] [] [get list watch]
buildlogs [] [] [get list watch]
builds/details [] [] [get list watch]
builds/log [] [] [get list watch]
builds [] [] [get list watch]
clusternetworks [] [] [get list watch]
clusterresourcequotas/status [] [] [get list watch]
clusterresourcequotas [] [] [get list watch]
clusterrolebindings [] [] [get list watch]
clusterroles [] [] [get list watch]
componentstatuses [] [] [get list watch]
configmaps [] [] [get list watch]
deploymentconfigs/log [] [] [get list watch]
deploymentconfigs/scale [] [] [get list watch]
deploymentconfigs/status [] [] [get list watch]
deploymentconfigs [] [] [get list watch]
egressnetworkpolicies [] [] [get list watch]
endpoints [] [] [get list watch]
events [] [] [get list watch]
groups [] [] [get list watch]
hostsubnets [] [] [get list watch]
identities [] [] [get list watch]
images [] [] [get list watch]
imagesignatures [] [] [get list watch]
imagestreamimages [] [] [get list watch]
imagestreammappings [] [] [get list watch]
imagestreams/status [] [] [get list watch]
imagestreams [] [] [get list watch]
imagestreamtags [] [] [get list watch]
limitranges [] [] [get list watch]
namespaces/status [] [] [get list watch]
namespaces [] [] [get list watch]
netnamespaces [] [] [get list watch]
nodes/status [] [] [get list watch]
nodes [] [] [get list watch]
oauthclientauthorizations [] [] [get list watch]
persistentvolumeclaims/status [] [] [get list watch]
persistentvolumeclaims [] [] [get list watch]
persistentvolumes/status [] [] [get list watch]
persistentvolumes [] [] [get list watch]
pods/binding [] [] [get list watch]
pods/eviction [] [] [get list watch]
pods/log [] [] [get list watch]
pods/status [] [] [get list watch]
pods [] [] [get list watch]
podtemplates [] [] [get list watch]
processedtemplates [] [] [get list watch]
projectrequests [] [] [get list watch]
replicationcontrollers/scale [] [] [get list watch]
replicationcontrollers/status [] [] [get list watch]
replicationcontrollers [] [] [get list watch]
resourcequotas/status [] [] [get list watch]
resourcequotas [] [] [get list watch]
resourcequotausages [] [] [get list watch]
rolebindingrestrictions [] [] [get list watch]
rolebindings [] [] [get list watch]
roles [] [] [get list watch]
routes/status [] [] [get list watch]
routes [] [] [get list watch]
serviceaccounts [] [] [get list watch]
services/status [] [] [get list watch]
services [] [] [get list watch]
templateconfigs [] [] [get list watch]
templateinstances/status [] [] [get list watch]
templateinstances [] [] [get list watch]
templates [] [] [get list watch]
useridentitymappings [] [] [get list watch]
users [] [] [get list watch]
mutatingwebhookconfigurations.admissionregistration.k8s.io [] [] [get list watch]
validatingwebhookconfigurations.admissionregistration.k8s.io [] [] [get list watch]
customresourcedefinitions.apiextensions.k8s.io/status [] [] [get list watch]
customresourcedefinitions.apiextensions.k8s.io [] [] [get list watch]
apiservices.apiregistration.k8s.io/status [] [] [get list watch]
apiservices.apiregistration.k8s.io [] [] [get list watch]
deploymentconfigs.apps.openshift.io/log [] [] [get list watch]
deploymentconfigs.apps.openshift.io/scale [] [] [get list watch]
deploymentconfigs.apps.openshift.io/status [] [] [get list watch]
deploymentconfigs.apps.openshift.io [] [] [get list watch]
controllerrevisions.apps [] [] [get list watch]
daemonsets.apps/status [] [] [get list watch]
daemonsets.apps [] [] [get list watch]
deployments.apps/scale [] [] [get list watch]
deployments.apps/status [] [] [get list watch]
deployments.apps [] [] [get list watch]
replicasets.apps/scale [] [] [get list watch]
replicasets.apps/status [] [] [get list watch]
replicasets.apps [] [] [get list watch]
statefulsets.apps/scale [] [] [get list watch]
statefulsets.apps/status [] [] [get list watch]
statefulsets.apps [] [] [get list watch]
clusterrolebindings.authorization.openshift.io [] [] [get list watch]
clusterroles.authorization.openshift.io [] [] [get list watch]
rolebindingrestrictions.authorization.openshift.io [] [] [get list watch]
rolebindings.authorization.openshift.io [] [] [get list watch]
roles.authorization.openshift.io [] [] [get list watch]
horizontalpodautoscalers.autoscaling/status [] [] [get list watch]
horizontalpodautoscalers.autoscaling [] [] [get list watch]
cronjobs.batch/status [] [] [get list watch]
cronjobs.batch [] [] [get list watch]
jobs.batch/status [] [] [get list watch]
jobs.batch [] [] [get list watch]
buildconfigs.build.openshift.io/webhooks [] [] [get list watch]
buildconfigs.build.openshift.io [] [] [get list watch]
buildlogs.build.openshift.io [] [] [get list watch]
builds.build.openshift.io/details [] [] [get list watch]
builds.build.openshift.io/log [] [] [get list watch]
builds.build.openshift.io [] [] [get list watch]
certificatesigningrequests.certificates.k8s.io/approval [] [] [get list watch]
certificatesigningrequests.certificates.k8s.io/status [] [] [get list watch]
certificatesigningrequests.certificates.k8s.io [] [] [get list watch]
events.events.k8s.io [] [] [get list watch]
daemonsets.extensions/status [] [] [get list watch]
daemonsets.extensions [] [] [get list watch]
deployments.extensions/scale [] [] [get list watch]
deployments.extensions/status [] [] [get list watch]
deployments.extensions [] [] [get list watch]
horizontalpodautoscalers.extensions/status [] [] [get list watch]
horizontalpodautoscalers.extensions [] [] [get list watch]
ingresses.extensions/status [] [] [get list watch]
ingresses.extensions [] [] [get list watch]
jobs.extensions/status [] [] [get list watch]
jobs.extensions [] [] [get list watch]
networkpolicies.extensions [] [] [get list watch]
podsecuritypolicies.extensions [] [] [get list watch]
replicasets.extensions/scale [] [] [get list watch]
replicasets.extensions/status [] [] [get list watch]
replicasets.extensions [] [] [get list watch]
replicationcontrollers.extensions/scale [] [] [get list watch]
replicationcontrollers.extensions [] [] [get list watch]
storageclasses.extensions [] [] [get list watch]
thirdpartyresources.extensions [] [] [get list watch]
images.image.openshift.io [] [] [get list watch]
imagesignatures.image.openshift.io [] [] [get list watch]
imagestreamimages.image.openshift.io [] [] [get list watch]
imagestreammappings.image.openshift.io [] [] [get list watch]
imagestreams.image.openshift.io/status [] [] [get list watch]
imagestreams.image.openshift.io [] [] [get list watch]
imagestreamtags.image.openshift.io [] [] [get list watch]
clusternetworks.network.openshift.io [] [] [get list watch]
egressnetworkpolicies.network.openshift.io [] [] [get list watch]
hostsubnets.network.openshift.io [] [] [get list watch]
netnamespaces.network.openshift.io [] [] [get list watch]
networkpolicies.networking.k8s.io [] [] [get list watch]
oauthclientauthorizations.oauth.openshift.io [] [] [get list watch]
poddisruptionbudgets.policy/status [] [] [get list watch]
poddisruptionbudgets.policy [] [] [get list watch]
podsecuritypolicies.policy [] [] [get list watch]
projectrequests.project.openshift.io [] [] [get list watch]
appliedclusterresourcequotas.quota.openshift.io [] [] [get list watch]
clusterresourcequotas.quota.openshift.io/status [] [] [get list watch]
clusterresourcequotas.quota.openshift.io [] [] [get list watch]
clusterrolebindings.rbac.authorization.k8s.io [] [] [get list watch]
clusterroles.rbac.authorization.k8s.io [] [] [get list watch]
rolebindings.rbac.authorization.k8s.io [] [] [get list watch]
roles.rbac.authorization.k8s.io [] [] [get list watch]
routes.route.openshift.io/status [] [] [get list watch]
routes.route.openshift.io [] [] [get list watch]
priorityclasses.scheduling.k8s.io [] [] [get list watch]
rangeallocations.security.openshift.io [] [] [get list watch]
securitycontextconstraints.security.openshift.io [] [] [get list watch]
servicebindings.servicecatalog.k8s.io [] [] [get list watch]
servicebrokers.servicecatalog.k8s.io [] [] [get list watch]
serviceclasses.servicecatalog.k8s.io [] [] [get list watch]
serviceinstances.servicecatalog.k8s.io [] [] [get list watch]
serviceplans.servicecatalog.k8s.io [] [] [get list watch]
podpresets.settings.k8s.io [] [] [get list watch]
storageclasses.storage.k8s.io [] [] [get list watch]
volumeattachments.storage.k8s.io [] [] [get list watch]
brokertemplateinstances.template.openshift.io [] [] [get list watch]
processedtemplates.template.openshift.io [] [] [get list watch]
templateconfigs.template.openshift.io [] [] [get list watch]
templateinstances.template.openshift.io/status [] [] [get list watch]
templateinstances.template.openshift.io [] [] [get list watch]
templates.template.openshift.io [] [] [get list watch]
groups.user.openshift.io [] [] [get list watch]
identities.user.openshift.io [] [] [get list watch]
useridentitymappings.user.openshift.io [] [] [get list watch]
users.user.openshift.io [] [] [get list watch]
[*] [] [get]
imagestreams/layers [] [] [get]
nodes/metrics [] [] [get]
nodes/spec [] [] [get]
imagestreams.image.openshift.io/layers [] [] [get]
projects [] [] [list watch get]
projects.project.openshift.io [] [] [list watch get]
jenkins.build.openshift.io [] [] [view]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment