1# Copyright 2022 Google LLC
2#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15apiVersion: rbac.authorization.k8s.io/v1
16kind: ClusterRole
17metadata:
18 name: manager-cluster-role
19rules:
20 - apiGroups:
21 - apiextensions.k8s.io
22 resources:
23 - customresourcedefinitions
24 verbs:
25 - get
26 - list
27 - watch
28 - apiGroups:
29 - ""
30 resources:
31 - namespaces
32 verbs:
33 - get
34 - list
35 - watch
36 - apiGroups:
37 - admissionregistration.k8s.io
38 resources:
39 - validatingwebhookconfigurations
40 verbs:
41 - get
42 - list
43 - watch
44 - create
45 - update
46 - patch
47 - delete
48 - apiGroups:
49 - core.cnrm.cloud.google.com
50 resources:
51 - servicemappings
52 verbs:
53 - get
54 - list
55 - watch
56 - apiGroups:
57 - core.cnrm.cloud.google.com
58 resources:
59 - '*'
60 verbs:
61 - get
62 - list
63 - watch
64 - create
65 - update
66 - patch
67 - deleteView as plain text