[GitHub] [submarine] kevin85421 opened a new pull request #563: SUBMARINE-801. Create RBAC for submarine server via submarine-operator

[GitBox]

kevin85421 opened a new pull request #563:
URL: https://github.com/apache/submarine/pull/563


   ### What is this PR for?
   Create RBAC for submarine server via submarine-operator
   
   Reference: 
https://github.com/apache/submarine/blob/master/helm-charts/submarine/templates/rbac.yaml
   
   ### What type of PR is it?
   [Feature]
   
   ### Todos
   
   
   ### What is the Jira issue?
   https://issues.apache.org/jira/browse/SUBMARINE-801
   
   ### How should this be tested?
   ```
   # initialization
   # Step1: Register Custom Resource Definition
   kubectl apply -f artifacts/examples/crd.yaml
   
   # Step2: Create a Custom Resource
   kubectl apply -f artifacts/examples/example-submarine.yaml
   
   
   # helm
   cd submarine
   helm install submarine ./helm-charts/submarine
   kubectl describe clusterrole submarine-server
   kubectl describe clusterrolebinding submarine-server
   
   # in-cluster
   cd submarine/submarine-cloud-v2
   eval $(minikube docker-env)
   make image
   kubectl apply -f artifacts/examples/submarine-operator-service-account.yaml
   kubectl apply -f artifacts/examples/submarine-operator.yaml
   kubectl describe clusterrole submarine-server
   kubectl describe clusterrolebinding submarine-server
   
   
   # out-of-cluster
   go build -o submarine-operator
   ./submarine-operator
   ```
   ### Screenshots (if appropriate)
   * ClusterRole (helm)
   <img width="966" alt="helm_clusterrole" 
src="https://user-images.githubusercontent.com/20109646/115945169-03081d80-a4ed-11eb-8310-f7cdbb161cec.png";>
   
   * ClusterRole (out-of-cluster submarine-operator)
   <img width="971" alt="out_of_cluster_clusterrole" 
src="https://user-images.githubusercontent.com/20109646/115945288-a5c09c00-a4ed-11eb-9958-61b5200df60d.png";>
   
   
   * ClusterRole (in-cluster submarine-operator)
   <img width="967" alt="in_cluster_clusterrole" 
src="https://user-images.githubusercontent.com/20109646/115945285-9fcabb00-a4ed-11eb-8cab-d8e7adb9840d.png";>
   
   
   * ClusterRoleBinding (helm)
   <img width="829" alt="helm_clusterrolebinding" 
src="https://user-images.githubusercontent.com/20109646/115945221-39de3380-a4ed-11eb-9b5b-f6b4f19a8598.png";>
   
   
   * ClusterRoleBinding (out-of-cluster submarine-operator)
   <img width="427" alt="out_of_cluster_clusterrolebinding" 
src="https://user-images.githubusercontent.com/20109646/115945193-187d4780-a4ed-11eb-9394-fc8da3819f3b.png";>
   
   * ClusterRoleBinding (in-cluster submarine-operator)
   <img width="942" alt="in_cluster_clusterrolebinding" 
src="https://user-images.githubusercontent.com/20109646/115945268-8295ec80-a4ed-11eb-8b2d-0aa4d154e36d.png";>
   
   
   
   ### Questions:
   * Do the license files need updating? No
   * Are there breaking changes for older versions? No
   * Does this need new documentation? No
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org