1---
2apiVersion: rbac.authorization.k8s.io/v1
3kind: ClusterRole
4metadata:
5 name: manager-role
6rules:
7- apiGroups:
8 - ""
9 resources:
10 - configmaps
11 verbs:
12 - create
13 - delete
14 - get
15 - list
16 - patch
17 - update
18 - watch
19- apiGroups:
20 - ""
21 resources:
22 - events
23 - secrets
24 - serviceaccounts
25 - services
26 verbs:
27 - create
28 - get
29 - list
30 - patch
31 - update
32 - watch
33- apiGroups:
34 - ""
35 resources:
36 - nodes
37 verbs:
38 - get
39 - list
40 - watch
41- apiGroups:
42 - ""
43 resources:
44 - persistentvolumeclaims
45 verbs:
46 - delete
47 - get
48 - list
49 - watch
50- apiGroups:
51 - ""
52 resources:
53 - persistentvolumes
54 - pods
55 verbs:
56 - delete
57 - get
58 - list
59 - patch
60 - update
61 - watch
62- apiGroups:
63 - ""
64 resources:
65 - pods/finalizers
66 - pods/status
67 verbs:
68 - patch
69 - update
70- apiGroups:
71 - apps
72 resources:
73 - deployments
74 - statefulsets
75 verbs:
76 - create
77 - delete
78 - get
79 - list
80 - patch
81 - update
82 - watch
83- apiGroups:
84 - cert-manager.io
85 resources:
86 - certificates
87 - clusterissuers
88 - issuers
89 verbs:
90 - create
91 - delete
92 - get
93 - list
94 - patch
95 - update
96 - watch
97- apiGroups:
98 - cluster.redpanda.com
99 resources:
100 - redpandas
101 verbs:
102 - create
103 - delete
104 - get
105 - list
106 - patch
107 - update
108 - watch
109- apiGroups:
110 - cluster.redpanda.com
111 resources:
112 - redpandas/finalizers
113 - schemas/finalizers
114 - topics/finalizers
115 - users/finalizers
116 verbs:
117 - update
118- apiGroups:
119 - cluster.redpanda.com
120 resources:
121 - redpandas/status
122 - schemas/status
123 - topics/status
124 - users/status
125 verbs:
126 - get
127 - patch
128 - update
129- apiGroups:
130 - cluster.redpanda.com
131 resources:
132 - schemas
133 - topics
134 - users
135 verbs:
136 - get
137 - list
138 - patch
139 - update
140 - watch
141- apiGroups:
142 - coordination.k8s.io
143 resources:
144 - leases
145 verbs:
146 - create
147 - delete
148 - get
149 - list
150 - patch
151 - update
152 - watch
153- apiGroups:
154 - networking.k8s.io
155 resources:
156 - ingresses
157 verbs:
158 - create
159 - delete
160 - get
161 - list
162 - patch
163 - update
164 - watch
165- apiGroups:
166 - policy
167 resources:
168 - poddisruptionbudgets
169 verbs:
170 - create
171 - delete
172 - get
173 - list
174 - patch
175 - update
176 - watch
177- apiGroups:
178 - rbac.authorization.k8s.io
179 resources:
180 - clusterrolebindings
181 - clusterroles
182 verbs:
183 - create
184 - delete
185 - get
186 - list
187 - patch
188 - update
189 - watch
190- apiGroups:
191 - redpanda.vectorized.io
192 resources:
193 - clusters
194 - consoles
195 verbs:
196 - create
197 - delete
198 - get
199 - list
200 - patch
201 - update
202 - watch
203- apiGroups:
204 - redpanda.vectorized.io
205 resources:
206 - clusters/finalizers
207 verbs:
208 - patch
209 - update
210- apiGroups:
211 - redpanda.vectorized.io
212 resources:
213 - clusters/status
214 - consoles/status
215 verbs:
216 - get
217 - patch
218 - update
219- apiGroups:
220 - redpanda.vectorized.io
221 resources:
222 - consoles/finalizers
223 verbs:
224 - update
225- apiGroups:
226 - scheduling.k8s.io
227 resources:
228 - priorityclasses
229 verbs:
230 - get
231 - list
232 - watch
233---
234apiVersion: rbac.authorization.k8s.io/v1
235kind: Role
236metadata:
237 name: manager-role
238 namespace: default
239rules:
240- apiGroups:
241 - ""
242 resources:
243 - configmaps
244 - pods
245 - secrets
246 - serviceaccounts
247 - services
248 verbs:
249 - create
250 - delete
251 - get
252 - list
253 - patch
254 - update
255 - watch
256- apiGroups:
257 - ""
258 resources:
259 - events
260 verbs:
261 - create
262 - patch
263- apiGroups:
264 - ""
265 resources:
266 - persistentvolumeclaims
267 verbs:
268 - delete
269 - get
270 - list
271 - patch
272 - update
273 - watch
274- apiGroups:
275 - ""
276 resources:
277 - pods/status
278 verbs:
279 - patch
280 - update
281- apiGroups:
282 - apps
283 resources:
284 - deployments
285 - replicasets
286 - statefulsets
287 verbs:
288 - create
289 - delete
290 - get
291 - list
292 - patch
293 - update
294 - watch
295- apiGroups:
296 - apps
297 resources:
298 - statefulsets/status
299 verbs:
300 - patch
301 - update
302- apiGroups:
303 - autoscaling
304 resources:
305 - horizontalpodautoscalers
306 verbs:
307 - create
308 - delete
309 - get
310 - list
311 - patch
312 - update
313 - watch
314- apiGroups:
315 - batch
316 resources:
317 - jobs
318 verbs:
319 - create
320 - delete
321 - get
322 - list
323 - patch
324 - update
325 - watch
326- apiGroups:
327 - cert-manager.io
328 resources:
329 - certificates
330 - issuers
331 verbs:
332 - create
333 - delete
334 - get
335 - list
336 - patch
337 - update
338 - watch
339- apiGroups:
340 - coordination.k8s.io
341 resources:
342 - leases
343 verbs:
344 - create
345 - delete
346 - get
347 - list
348 - patch
349 - update
350 - watch
351- apiGroups:
352 - helm.toolkit.fluxcd.io
353 resources:
354 - helmreleases
355 verbs:
356 - create
357 - delete
358 - get
359 - list
360 - patch
361 - update
362 - watch
363- apiGroups:
364 - helm.toolkit.fluxcd.io
365 resources:
366 - helmreleases/finalizers
367 verbs:
368 - update
369- apiGroups:
370 - helm.toolkit.fluxcd.io
371 resources:
372 - helmreleases/status
373 verbs:
374 - get
375 - patch
376 - update
377- apiGroups:
378 - monitoring.coreos.com
379 resources:
380 - podmonitors
381 - servicemonitors
382 verbs:
383 - create
384 - delete
385 - get
386 - list
387 - patch
388 - update
389 - watch
390- apiGroups:
391 - networking.k8s.io
392 resources:
393 - ingresses
394 verbs:
395 - create
396 - delete
397 - get
398 - list
399 - patch
400 - update
401 - watch
402- apiGroups:
403 - policy
404 resources:
405 - poddisruptionbudgets
406 verbs:
407 - create
408 - delete
409 - get
410 - list
411 - patch
412 - update
413 - watch
414- apiGroups:
415 - rbac.authorization.k8s.io
416 resources:
417 - rolebindings
418 - roles
419 verbs:
420 - create
421 - delete
422 - get
423 - list
424 - patch
425 - update
426 - watch
427- apiGroups:
428 - source.toolkit.fluxcd.io
429 resources:
430 - buckets
431 - gitrepositories
432 - gitrepository
433 - helmcharts
434 - helmrepositories
435 verbs:
436 - create
437 - delete
438 - get
439 - list
440 - patch
441 - update
442 - watch
443- apiGroups:
444 - source.toolkit.fluxcd.io
445 resources:
446 - gitrepository/finalizers
447 - helmcharts/finalizers
448 - helmrepositories/finalizers
449 verbs:
450 - create
451 - delete
452 - get
453 - patch
454 - update
455- apiGroups:
456 - source.toolkit.fluxcd.io
457 resources:
458 - gitrepository/status
459 - helmcharts/status
460 - helmrepositories/status
461 verbs:
462 - get
463 - patch
464 - update
View as plain text