1---
2apiVersion: rbac.authorization.k8s.io/v1
3kind: ClusterRole
4metadata:
5 name: v2-manager-role
6rules:
7- apiGroups:
8 - ""
9 resources:
10 - configmaps
11 - nodes
12 - secrets
13 verbs:
14 - get
15 - list
16 - watch
17- apiGroups:
18 - ""
19 resources:
20 - persistentvolumes
21 verbs:
22 - delete
23 - get
24 - list
25 - patch
26 - update
27 - watch
28- apiGroups:
29 - cluster.redpanda.com
30 resources:
31 - redpandas
32 verbs:
33 - create
34 - delete
35 - get
36 - list
37 - patch
38 - update
39 - watch
40- apiGroups:
41 - cluster.redpanda.com
42 resources:
43 - redpandas/finalizers
44 - schemas/finalizers
45 - topics/finalizers
46 - users/finalizers
47 verbs:
48 - update
49- apiGroups:
50 - cluster.redpanda.com
51 resources:
52 - redpandas/status
53 - schemas/status
54 - topics/status
55 - users/status
56 verbs:
57 - get
58 - patch
59 - update
60- apiGroups:
61 - cluster.redpanda.com
62 resources:
63 - schemas
64 - topics
65 - users
66 verbs:
67 - get
68 - list
69 - patch
70 - update
71 - watch
72- apiGroups:
73 - rbac.authorization.k8s.io
74 resources:
75 - clusterrolebindings
76 - clusterroles
77 verbs:
78 - create
79 - delete
80 - get
81 - list
82 - patch
83 - update
84 - watch
85---
86apiVersion: rbac.authorization.k8s.io/v1
87kind: Role
88metadata:
89 name: v2-manager-role
90 namespace: default
91rules:
92- apiGroups:
93 - ""
94 resources:
95 - configmaps
96 - pods
97 - secrets
98 - serviceaccounts
99 - services
100 verbs:
101 - create
102 - delete
103 - get
104 - list
105 - patch
106 - update
107 - watch
108- apiGroups:
109 - ""
110 resources:
111 - events
112 verbs:
113 - create
114 - patch
115- apiGroups:
116 - ""
117 resources:
118 - persistentvolumeclaims
119 verbs:
120 - delete
121 - get
122 - list
123 - patch
124 - update
125 - watch
126- apiGroups:
127 - ""
128 resources:
129 - pods/status
130 verbs:
131 - patch
132 - update
133- apiGroups:
134 - apps
135 resources:
136 - deployments
137 - replicasets
138 - statefulsets
139 verbs:
140 - create
141 - delete
142 - get
143 - list
144 - patch
145 - update
146 - watch
147- apiGroups:
148 - apps
149 resources:
150 - statefulsets/status
151 verbs:
152 - patch
153 - update
154- apiGroups:
155 - autoscaling
156 resources:
157 - horizontalpodautoscalers
158 verbs:
159 - create
160 - delete
161 - get
162 - list
163 - patch
164 - update
165 - watch
166- apiGroups:
167 - batch
168 resources:
169 - jobs
170 verbs:
171 - create
172 - delete
173 - get
174 - list
175 - patch
176 - update
177 - watch
178- apiGroups:
179 - cert-manager.io
180 resources:
181 - certificates
182 - issuers
183 verbs:
184 - create
185 - delete
186 - get
187 - list
188 - patch
189 - update
190 - watch
191- apiGroups:
192 - helm.toolkit.fluxcd.io
193 resources:
194 - helmreleases
195 verbs:
196 - create
197 - delete
198 - get
199 - list
200 - patch
201 - update
202 - watch
203- apiGroups:
204 - helm.toolkit.fluxcd.io
205 resources:
206 - helmreleases/finalizers
207 verbs:
208 - update
209- apiGroups:
210 - helm.toolkit.fluxcd.io
211 resources:
212 - helmreleases/status
213 verbs:
214 - get
215 - patch
216 - update
217- apiGroups:
218 - monitoring.coreos.com
219 resources:
220 - podmonitors
221 - servicemonitors
222 verbs:
223 - create
224 - delete
225 - get
226 - list
227 - patch
228 - update
229 - watch
230- apiGroups:
231 - networking.k8s.io
232 resources:
233 - ingresses
234 verbs:
235 - create
236 - delete
237 - get
238 - list
239 - patch
240 - update
241 - watch
242- apiGroups:
243 - policy
244 resources:
245 - poddisruptionbudgets
246 verbs:
247 - create
248 - delete
249 - get
250 - list
251 - patch
252 - update
253 - watch
254- apiGroups:
255 - rbac.authorization.k8s.io
256 resources:
257 - rolebindings
258 - roles
259 verbs:
260 - create
261 - delete
262 - get
263 - list
264 - patch
265 - update
266 - watch
267- apiGroups:
268 - source.toolkit.fluxcd.io
269 resources:
270 - buckets
271 - gitrepositories
272 - gitrepository
273 - helmcharts
274 - helmrepositories
275 verbs:
276 - create
277 - delete
278 - get
279 - list
280 - patch
281 - update
282 - watch
283- apiGroups:
284 - source.toolkit.fluxcd.io
285 resources:
286 - gitrepository/finalizers
287 - helmcharts/finalizers
288 - helmrepositories/finalizers
289 verbs:
290 - create
291 - delete
292 - get
293 - patch
294 - update
295- apiGroups:
296 - source.toolkit.fluxcd.io
297 resources:
298 - gitrepository/status
299 - helmcharts/status
300 - helmrepositories/status
301 verbs:
302 - get
303 - patch
304 - update
View as plain text