1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: vmctl
5rules:
6- resources:
7 - configmaps
8 apiGroups:
9 - ""
10 verbs:
11 - get
12 - list
13 - watch
14- resources:
15 - pods
16 apiGroups:
17 - ""
18 verbs:
19 - create
20 - delete
21 - get
22 - list
23 - patch
24 - watch
25- resources:
26 - serviceaccounts
27 apiGroups:
28 - ""
29 verbs:
30 - create
31 - delete
32 - get
33 - list
34 - patch
35 - watch
36- resources:
37 - virtualmachineinstances
38 apiGroups:
39 - kubevirt.io
40 verbs:
41 - get
42 - list
43 - watch
44- resources:
45 - rolebindings
46 apiGroups:
47 - rbac.authorization.k8s.io
48 verbs:
49 - create
50 - delete
51 - get
52 - list
53 - patch
54 - watch
55- resources:
56 - roles
57 apiGroups:
58 - rbac.authorization.k8s.io
59 verbs:
60 - bind
61 - create
62 - delete
63 - get
64 - list
65 - patch
66 - watch
67- resources:
68 - virtualmachineinstances/usbredir
69 apiGroups:
70 - subresources.kubevirt.io
71 verbs:
72 - get
73 - list
74 - watch
75- resources:
76 - vmusbredirections
77 apiGroups:
78 - virtualmachine.edge.ncr.com
79 verbs:
80 - get
81 - list
82 - patch
83 - update
84 - watch
85- resources:
86 - vmusbredirections/status
87 apiGroups:
88 - virtualmachine.edge.ncr.com
89 verbs:
90 - get
91 - patch
92 - update
View as plain text