Kubernetes Submit Queue 3f2a02cf98 Merge pull request #39383 from liggitt/bind-check ... Automatic merge from submit-queue (batch tested with PRs 39694, 39383, 39651, 39691, 39497) Allow rolebinding/clusterrolebinding with explicit bind permission check Fixes https://github.com/kubernetes/kubernetes/issues/39176 Fixes https://github.com/kubernetes/kubernetes/issues/39258 Allows creating/updating a rolebinding/clusterrolebinding if the user has explicitly been granted permission to perform the "bind" verb against the referenced role/clusterrole (previously, they could only bind if they already had all the permissions in the referenced role via an RBAC role themselves) ```release-note To create or update an RBAC RoleBinding or ClusterRoleBinding object, a user must: 1. Be authorized to make the create or update API request 2. Be allowed to bind the referenced role, either by already having all of the permissions contained in the referenced role, or by having the "bind" permission on the referenced role. ```		2017-01-10 21:25:13 -08:00
..
ports	Enable auto-generating sources rules	2017-01-05 14:14:13 -08:00
thirdparty	Merge pull request #39415 from sttts/sttts-thirdparty-verbs	2017-01-10 13:33:14 -08:00
BUILD	Disable TestValidOpenAPISpec when -race test flag exists	2017-01-09 21:24:38 -08:00
controller.go	GetOptions in client calls	2016-12-09 09:42:01 +01:00
controller_test.go	reconcile when service already exists	2016-12-01 09:14:31 -05:00
doc.go	Use Go canonical import paths	2016-07-16 13:48:21 -04:00
import_known_versions.go	move StorageClass to its own group	2016-09-06 08:41:17 -04:00
import_known_versions_test.go	Add test for json tags in internal/external types	2016-12-22 09:32:57 -05:00
master.go	Allow rolebinding/clusterrolebinding with explicit bind permission check	2017-01-10 14:34:33 -05:00
master_openapi_test.go	Disable TestValidOpenAPISpec when -race test flag exists	2017-01-09 21:24:38 -08:00
master_test.go	Disable TestValidOpenAPISpec when -race test flag exists	2017-01-09 21:24:38 -08:00
OWNERS	Remove myself from a bunch of OWNERS files, as I am too overloaded	2016-05-11 13:34:51 -07:00
services.go	Move DefaultServiceIPRange into pkg/master	2016-12-03 18:34:22 +01:00