Skip to content

Commit

Permalink
fix(config): add permissions for resource types
Browse files Browse the repository at this point in the history
* add read/update permissions for:
  * apps/daemonsets
  * apps/replicasets
  * apps/statefulsets
  * batch/cronjobs
  * batch/jobs
* remove create/delete permissions for apps/*. (There were no
  create/delete permissions for batch/*.)
* remove patch permissions for events
  • Loading branch information
basti1302 committed May 24, 2024
1 parent 3d7e9ad commit 16bd693
Showing 1 changed file with 24 additions and 3 deletions.
27 changes: 24 additions & 3 deletions config/rbac/role.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,25 +4,44 @@ kind: ClusterRole
metadata:
name: manager-role
rules:

# Apps
- apiGroups:
- apps
resources:
- daemonsets
- deployments
- replicasets
- statefulsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch

# Batch
- apiGroups:
- batch
resources:
- cronjobs
- jobs
verbs:
- get
- list
- patch
- watch
- update

# Events
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch

# Core
- apiGroups:
- ""
resources:
Expand All @@ -31,6 +50,8 @@ rules:
- get
- list
- watch

# Dash0 custom resource
- apiGroups:
- operator.dash0.com
resources:
Expand Down

0 comments on commit 16bd693

Please sign in to comment.