1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: envctl
5rules:
6- resources:
7 - configmaps
8 apiGroups:
9 - ""
10 verbs:
11 - create
12 - get
13 - list
14 - patch
15 - update
16 - watch
17- resources:
18 - configmaps/status
19 apiGroups:
20 - ""
21 verbs:
22 - get
23 - patch
24 - update
25- resources:
26 - events
27 apiGroups:
28 - ""
29 verbs:
30 - create
31 - patch
32- resources:
33 - namespaces
34 apiGroups:
35 - ""
36 verbs:
37 - create
38 - get
39 - list
40 - patch
41 - update
42 - watch
43- resources:
44 - namespaces/status
45 apiGroups:
46 - ""
47 verbs:
48 - get
49 - patch
50 - update
51- resources:
52 - nodes
53 apiGroups:
54 - ""
55 verbs:
56 - get
57 - list
58 - update
59 - watch
60- resources:
61 - nodes/status
62 apiGroups:
63 - ""
64 verbs:
65 - get
66- resources:
67 - persistentvolumeclaims
68 - pods
69 apiGroups:
70 - ""
71 verbs:
72 - get
73 - list
74 - watch
75- resources:
76 - persistentvolumeclaims/status
77 - pods/status
78 apiGroups:
79 - ""
80 verbs:
81 - get
82 - watch
83- resources:
84 - statefulsets
85 apiGroups:
86 - apps
87 verbs:
88 - create
89 - delete
90 - get
91 - list
92 - patch
93 - update
94 - watch
95- resources:
96 - statefulsets/status
97 apiGroups:
98 - apps
99 verbs:
100 - get
101- resources:
102 - persistence
103 apiGroups:
104 - edge.ncr.com
105 verbs:
106 - create
107 - get
108 - list
109 - patch
110 - update
111 - watch
112- resources:
113 - persistence/status
114 apiGroups:
115 - edge.ncr.com
116 verbs:
117 - get
118 - patch
119 - update
View as plain text