Skip to content

Commit

Permalink
Remove pipeline role-binding
Browse files Browse the repository at this point in the history
  • Loading branch information
Wendy Gaultier authored Nov 30, 2022
1 parent 3dc1ce4 commit dd86ab1
Showing 1 changed file with 0 additions and 25 deletions.
25 changes: 0 additions & 25 deletions cmd/rbac.go
Original file line number Diff line number Diff line change
Expand Up @@ -187,31 +187,6 @@ func generateRoles(profile *kubeflowv1.Profile) []*rbacv1.Role {
func generateRoleBindings(profile *kubeflowv1.Profile) []*rbacv1.RoleBinding {
roleBindings := []*rbacv1.RoleBinding{}

// Grant every profile a ml-pipeline role binding
roleBinding := &rbacv1.RoleBinding{
ObjectMeta: metav1.ObjectMeta{
Name: "ml-pipeline",
Namespace: profile.Name,
OwnerReferences: []metav1.OwnerReference{
*metav1.NewControllerRef(profile, kubeflowv1.SchemeGroupVersion.WithKind("Profile")),
},
},
RoleRef: rbacv1.RoleRef{
APIGroup: rbacv1.SchemeGroupVersion.Group,
Kind: "ClusterRole",
Name: "ml-pipeline",
},
Subjects: []rbacv1.Subject{
{
APIGroup: "rbac.authorization.k8s.io",
Kind: "User",
Name: profile.Spec.Owner.Name,
},
},
}

roleBindings = append(roleBindings, roleBinding)

// DAaaS-AAW-Support is granted "profile-support" cluster role in this namespace
if len(rbacSupportGroups) > 0 {
roleBinding := &rbacv1.RoleBinding{
Expand Down

0 comments on commit dd86ab1

Please sign in to comment.