1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: crd-controller
5rules:
6- apiGroups:
7 - source.toolkit.fluxcd.io
8 resources:
9 - '*'
10 verbs:
11 - '*'
12- apiGroups:
13 - kustomize.toolkit.fluxcd.io
14 resources:
15 - '*'
16 verbs:
17 - '*'
18- apiGroups:
19 - helm.toolkit.fluxcd.io
20 resources:
21 - '*'
22 verbs:
23 - '*'
24- apiGroups:
25 - notification.toolkit.fluxcd.io
26 resources:
27 - '*'
28 verbs:
29 - '*'
30- apiGroups:
31 - image.toolkit.fluxcd.io
32 resources:
33 - '*'
34 verbs:
35 - '*'
36- apiGroups:
37 - ""
38 resources:
39 - namespaces
40 - secrets
41 verbs:
42 - get
43 - list
44 - watch
45- apiGroups:
46 - ""
47 resources:
48 - events
49 verbs:
50 - create
51 - patch
52- apiGroups:
53 - ""
54 resources:
55 - configmaps
56 - configmaps/status
57 verbs:
58 - get
59 - list
60 - watch
61 - create
62 - update
63 - patch
64 - delete
65- apiGroups:
66 - coordination.k8s.io
67 resources:
68 - leases
69 verbs:
70 - get
71 - list
72 - watch
73 - create
74 - update
75 - patch
76 - delete
77---
78apiVersion: rbac.authorization.k8s.io/v1
79kind: ClusterRoleBinding
80metadata:
81 name: cluster-reconciler
82roleRef:
83 apiGroup: rbac.authorization.k8s.io
84 kind: ClusterRole
85 name: cluster-admin
86subjects:
87- kind: ServiceAccount
88 name: kustomize-controller
89 namespace: flux-system
90- kind: ServiceAccount
91 name: helm-controller
92 namespace: flux-system
93---
94apiVersion: rbac.authorization.k8s.io/v1
95kind: ClusterRoleBinding
96metadata:
97 name: crd-controller
98roleRef:
99 apiGroup: rbac.authorization.k8s.io
100 kind: ClusterRole
101 name: crd-controller
102subjects:
103- kind: ServiceAccount
104 name: kustomize-controller
105 namespace: flux-system
106- kind: ServiceAccount
107 name: helm-controller
108 namespace: flux-system
109- kind: ServiceAccount
110 name: source-controller
111 namespace: flux-system
112- kind: ServiceAccount
113 name: notification-controller
114 namespace: flux-system
115- kind: ServiceAccount
116 name: image-reflector-controller
117 namespace: flux-system
118- kind: ServiceAccount
119 name: image-automation-controller
120 namespace: flux-system
View as plain text