vnfs/DAaaS/deploy/00-init/gloo/templates/20-namespace-clusterrole-gateway.yaml

   1 {{- if .Values.rbac.create }}
   2
   3 {{- if .Values.gateway.enabled }}
   4 kind: ClusterRole
   5 apiVersion: rbac.authorization.k8s.io/v1
   6 metadata:
   7     name: gloo-role-gateway
   8     labels:
   9         app: gloo
  10         gloo: rbac
  11 rules:
  12 - apiGroups: [""]
  13   resources: ["pods", "services", "secrets", "endpoints", "configmaps"]
  14   verbs: ["*"]
  15 - apiGroups: [""]
  16   resources: ["namespaces"]
  17   verbs: ["get", "list", "watch"]
  18 - apiGroups: ["apiextensions.k8s.io"]
  19   resources: ["customresourcedefinitions"]
  20   verbs: ["get", "create"]
  21 - apiGroups: ["gloo.solo.io"]
  22   resources: ["settings", "upstreams","upstreamgroups", "proxies","virtualservices"]
  23   verbs: ["*"]
  24 - apiGroups: ["gateway.solo.io"]
  25   resources: ["virtualservices", "gateways"]
  26   verbs: ["*"]
  27 {{- end -}}
  28
  29 {{- end -}}