1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: linkerdctl
5rules:
6- resources:
7 - configmaps
8 - namespaces
9 - pods
10 - secrets
11 - serviceaccounts
12 - services
13 apiGroups:
14 - ""
15 verbs:
16 - create
17 - delete
18 - get
19 - list
20 - patch
21 - update
22 - watch
23- resources:
24 - events
25 apiGroups:
26 - ""
27 verbs:
28 - create
29 - patch
30- resources:
31 - namespaces/status
32 - services/status
33 apiGroups:
34 - ""
35 verbs:
36 - get
37- resources:
38 - nodes
39 apiGroups:
40 - ""
41 verbs:
42 - get
43 - list
44 - watch
45- resources:
46 - mutatingwebhookconfigurations
47 - validatingwebhookconfigurations
48 apiGroups:
49 - admissionregistration.k8s.io
50 verbs:
51 - create
52 - delete
53 - get
54 - list
55 - patch
56 - update
57 - watch
58- resources:
59 - customresourcedefinitions
60 apiGroups:
61 - apiextensions.k8s.io
62 verbs:
63 - create
64 - delete
65 - get
66 - list
67 - patch
68 - update
69 - watch
70- resources:
71 - customresourcedefinitions/status
72 apiGroups:
73 - apiextensions.k8s.io
74 verbs:
75 - get
76- resources:
77 - daemonsets
78 - deployments
79 - replicasets
80 - statefulsets
81 apiGroups:
82 - apps
83 verbs:
84 - create
85 - delete
86 - get
87 - list
88 - patch
89 - update
90 - watch
91- resources:
92 - deployments/status
93 apiGroups:
94 - apps
95 verbs:
96 - get
97- resources:
98 - cronjobs
99 apiGroups:
100 - batch
101 verbs:
102 - create
103 - delete
104 - get
105 - list
106 - patch
107 - update
108 - watch
109- resources:
110 - cronjobs/status
111 apiGroups:
112 - batch
113 verbs:
114 - get
115- resources:
116 - certificates
117 - issuers
118 apiGroups:
119 - cert-manager.io
120 verbs:
121 - create
122 - delete
123 - get
124 - list
125 - patch
126 - update
127 - watch
128- resources:
129 - certificates/status
130 - issuers/status
131 apiGroups:
132 - cert-manager.io
133 verbs:
134 - get
135- resources:
136 - linkerds
137 apiGroups:
138 - linkerd.edge.ncr.com
139 verbs:
140 - get
141 - list
142 - patch
143 - update
144 - watch
145- resources:
146 - linkerds/status
147 apiGroups:
148 - linkerd.edge.ncr.com
149 verbs:
150 - get
151 - patch
152 - update
153- resources:
154 - linkerdworkloadinjections
155 apiGroups:
156 - linkerd.edge.ncr.com
157 verbs:
158 - create
159 - delete
160 - get
161 - list
162 - patch
163 - update
164 - watch
165- resources:
166 - linkerdworkloadinjections/status
167 apiGroups:
168 - linkerd.edge.ncr.com
169 verbs:
170 - get
171 - patch
172 - update
173- resources:
174 - podmonitors
175 apiGroups:
176 - monitoring.coreos.com
177 verbs:
178 - create
179 - get
180 - list
181 - patch
182 - update
183 - watch
184- resources:
185 - poddisruptionbudgets
186 - podsecuritypolicies
187 apiGroups:
188 - policy
189 verbs:
190 - create
191 - delete
192 - get
193 - list
194 - patch
195 - update
196 - watch
197- resources:
198 - authorizationpolicies
199 - serverauthorizations
200 - servers
201 apiGroups:
202 - policy.linkerd.io
203 verbs:
204 - create
205 - delete
206 - get
207 - list
208 - patch
209 - update
210 - watch
211- resources:
212 - clusterrolebindings
213 - clusterroles
214 - rolebindings
215 - roles
216 apiGroups:
217 - rbac.authorization.k8s.io
218 verbs:
219 - create
220 - delete
221 - get
222 - list
223 - patch
224 - update
225 - watch
226- resources:
227 - clusterroles
228 - roles
229 apiGroups:
230 - rbac.authorization.k8s.io
231 verbs:
232 - bind
233 - escalate
234- resources:
235 - clusters
236 apiGroups:
237 - redpanda.vectorized.io
238 verbs:
239 - get
240 - list
241 - patch
242 - watch
View as plain text