gerrit.onap Code Review - multicloud/k8s.git/blob

   1 apiVersion: rbac.authorization.k8s.io/v1beta1
   2 kind: ClusterRole
   3 metadata:
   4   name: {{ .Values.operator.name }}
   5 rules:
   6 - apiGroups: ["extensions"]
   7   resources: ["deployments", "replicasets", "daemonsets"]
   8   verbs: ["create", "get", "update", "delete", "list"]
   9 - apiGroups: ["apiextensions.k8s.io"]
  10   resources: ["customresourcedefinitions"]
  11   verbs: ["create", "get", "update", "delete", "list"]
  12 - apiGroups: ["storage.k8s.io"]
  13   resources: ["storageclasses"]
  14   verbs: ["get", "list", "create", "delete", "deletecollection"]
  15 - apiGroups: [""]
  16   resources: ["persistentvolumes", "persistentvolumeclaims", "services", "secrets", "configmaps"]
  17   verbs: ["create", "get", "update", "delete", "list"]
  18 - apiGroups: ["batch"]
  19   resources: ["cronjobs", "jobs"]
  20   verbs: ["create", "get", "deletecollection", "delete"]
  21 - apiGroups: [""]
  22   resources: ["pods"]
  23   verbs: ["list", "get", "watch", "update"]
  24 - apiGroups: ["apps"]
  25   resources: ["statefulsets", "deployments"]
  26   verbs: ["*"]
  27 - apiGroups: ["operator.m3db.io"]
  28   resources: ["*"]
  29   verbs: ["*"]
  30 - apiGroups: [""]
  31   resources: ["events"]
  32   verbs: ["create", "patch"]
  33 - apiGroups: [""]
  34   resources: ["nodes"]
  35   verbs: ["get", "list", "watch"]