1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: edge-injector
5rules:
6- resources:
7 - nodes
8 - pods
9 apiGroups:
10 - ""
11 verbs:
12 - get
13 - list
14 - watch
15- resources:
16 - nodes/status
17 - pods/status
18 - secrets/status
19 apiGroups:
20 - ""
21 verbs:
22 - get
23 - watch
24- resources:
25 - secrets
26 apiGroups:
27 - ""
28 verbs:
29 - create
30 - delete
31 - get
32 - list
33 - patch
34 - update
35 - watch
36- resources:
37 - daemonsets
38 - deployments
39 - replicasets
40 - statefulsets
41 apiGroups:
42 - apps
43 verbs:
44 - get
45 - list
46 - watch
47- resources:
48 - couchdbusers
49 apiGroups:
50 - datasync.edge.ncr.com
51 verbs:
52 - create
53 - get
54 - list
55 - patch
56 - update
57 - watch
58- resources:
59 - couchdbusers/status
60 apiGroups:
61 - datasync.edge.ncr.com
62 verbs:
63 - get
64 - watch
65- resources:
66 - devicestatuses
67 apiGroups:
68 - device-system.edge.ncr.com
69 verbs:
70 - get
71 - list
72 - watch
View as plain text