[PR] RBAC for automatic legacy peering detection

[kopf-archiver]

A pull request by nolar at 2019-06-02 03:17:07+00:00
Original URL: zalando-incubator/kopf#95
Merged by nolar at 2019-06-14 09:18:57+00:00

Issue : #12, #13, originally mentioned in #49 comments

Add the missing RBAC permissions for legacy CRD scanning in the documentation (deployment patterns, RBAC section).

Since CRD scanning is a cluster-scoped operation, and cluster-scoped RBAC is not always possible, make so that the "403 permission denied" response for CRDs is treated as the absence of CRD. It is currently only used for legacy peering CRD, and nothing else.

As part of that, in tests, also check for other typical statuses for all get/list API operations — via parametrization.

PS: The feature was introduced in the automatic peering/standalone mode discovery (#33 #38).