1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 labels:
5 app.kubernetes.io/component: controller
6 app.kubernetes.io/name: fluent-operator
7 name: fluent-operator
8rules:
9- apiGroups:
10 - apps
11 resources:
12 - daemonsets
13 - statefulsets
14 verbs:
15 - create
16 - delete
17 - get
18 - list
19 - patch
20 - update
21 - watch
22- apiGroups:
23 - ""
24 resources:
25 - pods
26 verbs:
27 - get
28- apiGroups:
29 - ""
30 resources:
31 - events
32 verbs:
33 - list
34 - watch
35- apiGroups:
36 - ""
37 resources:
38 - secrets
39 - configmaps
40 - serviceaccounts
41 - configmaps
42 - services
43 - namespaces
44 verbs:
45 - create
46 - delete
47 - get
48 - list
49 - patch
50 - update
51 - watch
52- apiGroups:
53 - fluentbit.fluent.io
54 resources:
55 - collectors
56 - fluentbits
57 - fluentbits/finalizers
58 - clusterfluentbitconfigs
59 - clusterfluentbitconfigs/finalizers
60 - clusterfilters
61 - clusterfilters/finalizers
62 - clusterinputs
63 - clusterinputs/finalizers
64 - clusteroutputs
65 - clusteroutputs/finalizers
66 - clusterparsers
67 - clusterparsers/finalizers
68 - fluentbitconfigs
69 - fluentbitconfigs/finalizers
70 - multilineparsers
71 - multilineparsers/finalizers
72 - clustermultilineparsers
73 - clustermultilineparsers/finalizers
74 - filters
75 - outputs
76 - parsers
77 verbs:
78 - create
79 - delete
80 - get
81 - list
82 - patch
83 - update
84 - watch
85- apiGroups:
86 - fluentd.fluent.io
87 resources:
88 - fluentds
89 - fluentds/status
90 - clusterfluentdconfigs
91 - clusterfluentdconfigs/status
92 - fluentdconfigs
93 - fluentdconfigs/status
94 - clusterfilters
95 - filters
96 - clusteroutputs
97 - outputs
98 - inputs
99 - clusterinputs
100 verbs:
101 - create
102 - delete
103 - get
104 - list
105 - patch
106 - update
107 - watch
108- apiGroups:
109 - rbac.authorization.k8s.io
110 resources:
111 - clusterrolebindings
112 verbs:
113 - create
114 - list
115 - get
116 - watch
117 - patch
118 - update
119- apiGroups:
120 - rbac.authorization.k8s.io
121 resources:
122 - clusterroles
123 verbs:
124 - create
125 - list
126 - get
127 - watch
128 - patch
129 # Need the update to allow fluent-operator to change the fluent bit cluster roles
130 - update
131- apiGroups:
132 - rbac.authorization.k8s.io
133 resources:
134 - rolebindings
135 verbs:
136 - create
137 - list
138 - get
139 - watch
140 - patch
141- apiGroups:
142 - rbac.authorization.k8s.io
143 resources:
144 - roles
145 verbs:
146 - create
147 - list
148 - get
149 - watch
150 - patchView as plain text