shirley 这么改一下试试 rules 中增加 pods/exec, 自定义角色的 bug
cat << EOF | kubectl apply -f -
apiVersion: iam.kubesphere.io/v1alpha2
kind: RoleBase
metadata:
name: role-template-manage-app-workloads
labels:
scope.kubesphere.io/namespace: ""
role:
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
annotations:
iam.kubesphere.io/dependencies: '["role-template-view-app-workloads"]'
iam.kubesphere.io/module: Application Workloads
iam.kubesphere.io/role-template-rules: '{"applications":"manage","deployments":"manage","statefulsets":"manage",
"daemonsets":"manage","jobs":"manage","cronjobs":"manage","pods":"manage","services":"manage","ingresses":"manage",
"s2ibuilders":"manage","grayscale-release": "manage"}'
kubesphere.io/alias-name: Application Workloads Management
labels:
iam.kubesphere.io/role-template: "true"
name: role-template-manage-app-workloads
rules:
- apiGroups:
- '*'
resources:
- services
- applications
- controllerrevisions
- deployments
- replicasets
- statefulsets
- daemonsets
- jobs
- cronjobs
- pods
- pods/log
- pods/exec
- pods/containers
- services
- ingresses
- router
- workloads
- s2ibinaries
- s2ibinaries/file
- s2ibuilders
- s2ibuildertemplates
- s2iruns
- horizontalpodautoscalers
verbs:
- '*'
- apiGroups:
- '*'
resources:
- 'secrets'
verbs:
- list
- apiGroups:
- 'servicemesh.kubesphere.io'
resources:
- '*'
verbs:
- '*'
EOF
kubectl -n kubesphere-system rollout restart deploy ks-controller-manager
