github.com/1aal/kubeblocks@v0.0.0-20231107070852-e1c03e598921/config/rbac/role.yaml (about)

     1  ---
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name: manager-role
     6  rules:
     7  - apiGroups:
     8    - apps
     9    resources:
    10    - deployments
    11    verbs:
    12    - create
    13    - delete
    14    - deletecollection
    15    - get
    16    - list
    17    - patch
    18    - update
    19    - watch
    20  - apiGroups:
    21    - apps
    22    resources:
    23    - deployments/finalizers
    24    verbs:
    25    - update
    26  - apiGroups:
    27    - apps
    28    resources:
    29    - deployments/status
    30    verbs:
    31    - get
    32  - apiGroups:
    33    - apps
    34    resources:
    35    - replicasets
    36    verbs:
    37    - create
    38    - delete
    39    - get
    40    - list
    41    - patch
    42    - update
    43    - watch
    44  - apiGroups:
    45    - apps
    46    resources:
    47    - replicasets/finalizers
    48    verbs:
    49    - update
    50  - apiGroups:
    51    - apps
    52    resources:
    53    - replicasets/status
    54    verbs:
    55    - get
    56  - apiGroups:
    57    - apps
    58    resources:
    59    - statefulsets
    60    verbs:
    61    - create
    62    - delete
    63    - deletecollection
    64    - get
    65    - list
    66    - patch
    67    - update
    68    - watch
    69  - apiGroups:
    70    - apps
    71    resources:
    72    - statefulsets/finalizers
    73    verbs:
    74    - update
    75  - apiGroups:
    76    - apps
    77    resources:
    78    - statefulsets/status
    79    verbs:
    80    - get
    81  - apiGroups:
    82    - apps.kubeblocks.io
    83    resources:
    84    - backuppolicytemplates
    85    verbs:
    86    - create
    87    - delete
    88    - get
    89    - list
    90    - patch
    91    - update
    92    - watch
    93  - apiGroups:
    94    - apps.kubeblocks.io
    95    resources:
    96    - backuppolicytemplates/finalizers
    97    verbs:
    98    - update
    99  - apiGroups:
   100    - apps.kubeblocks.io
   101    resources:
   102    - backuppolicytemplates/status
   103    verbs:
   104    - get
   105    - patch
   106    - update
   107  - apiGroups:
   108    - apps.kubeblocks.io
   109    resources:
   110    - clusterdefinitions
   111    verbs:
   112    - create
   113    - delete
   114    - get
   115    - list
   116    - patch
   117    - update
   118    - watch
   119  - apiGroups:
   120    - apps.kubeblocks.io
   121    resources:
   122    - clusterdefinitions/finalizers
   123    verbs:
   124    - update
   125  - apiGroups:
   126    - apps.kubeblocks.io
   127    resources:
   128    - clusterdefinitions/status
   129    verbs:
   130    - get
   131    - patch
   132    - update
   133  - apiGroups:
   134    - apps.kubeblocks.io
   135    resources:
   136    - clusters
   137    verbs:
   138    - create
   139    - delete
   140    - get
   141    - list
   142    - patch
   143    - update
   144    - watch
   145  - apiGroups:
   146    - apps.kubeblocks.io
   147    resources:
   148    - clusters/finalizers
   149    verbs:
   150    - update
   151  - apiGroups:
   152    - apps.kubeblocks.io
   153    resources:
   154    - clusters/status
   155    verbs:
   156    - get
   157    - patch
   158    - update
   159  - apiGroups:
   160    - apps.kubeblocks.io
   161    resources:
   162    - clusterversions
   163    verbs:
   164    - create
   165    - delete
   166    - get
   167    - list
   168    - patch
   169    - update
   170    - watch
   171  - apiGroups:
   172    - apps.kubeblocks.io
   173    resources:
   174    - clusterversions/finalizers
   175    verbs:
   176    - update
   177  - apiGroups:
   178    - apps.kubeblocks.io
   179    resources:
   180    - clusterversions/status
   181    verbs:
   182    - get
   183    - patch
   184    - update
   185  - apiGroups:
   186    - apps.kubeblocks.io
   187    resources:
   188    - componentclassdefinitions
   189    verbs:
   190    - create
   191    - delete
   192    - get
   193    - list
   194    - patch
   195    - update
   196    - watch
   197  - apiGroups:
   198    - apps.kubeblocks.io
   199    resources:
   200    - componentclassdefinitions/finalizers
   201    verbs:
   202    - update
   203  - apiGroups:
   204    - apps.kubeblocks.io
   205    resources:
   206    - componentclassdefinitions/status
   207    verbs:
   208    - get
   209    - patch
   210    - update
   211  - apiGroups:
   212    - apps.kubeblocks.io
   213    resources:
   214    - componentresourceconstraints
   215    verbs:
   216    - get
   217    - list
   218    - watch
   219  - apiGroups:
   220    - apps.kubeblocks.io
   221    resources:
   222    - configconstraints
   223    verbs:
   224    - create
   225    - delete
   226    - get
   227    - list
   228    - patch
   229    - update
   230    - watch
   231  - apiGroups:
   232    - apps.kubeblocks.io
   233    resources:
   234    - configconstraints/finalizers
   235    verbs:
   236    - update
   237  - apiGroups:
   238    - apps.kubeblocks.io
   239    resources:
   240    - configconstraints/status
   241    verbs:
   242    - get
   243    - patch
   244    - update
   245  - apiGroups:
   246    - apps.kubeblocks.io
   247    resources:
   248    - configurations
   249    verbs:
   250    - create
   251    - delete
   252    - get
   253    - list
   254    - patch
   255    - update
   256    - watch
   257  - apiGroups:
   258    - apps.kubeblocks.io
   259    resources:
   260    - configurations/finalizers
   261    verbs:
   262    - update
   263  - apiGroups:
   264    - apps.kubeblocks.io
   265    resources:
   266    - configurations/status
   267    verbs:
   268    - get
   269    - patch
   270    - update
   271  - apiGroups:
   272    - apps.kubeblocks.io
   273    resources:
   274    - opsrequests
   275    verbs:
   276    - create
   277    - delete
   278    - get
   279    - list
   280    - patch
   281    - update
   282    - watch
   283  - apiGroups:
   284    - apps.kubeblocks.io
   285    resources:
   286    - opsrequests/finalizers
   287    verbs:
   288    - update
   289  - apiGroups:
   290    - apps.kubeblocks.io
   291    resources:
   292    - opsrequests/status
   293    verbs:
   294    - get
   295    - patch
   296    - update
   297  - apiGroups:
   298    - apps.kubeblocks.io
   299    resources:
   300    - servicedescriptors
   301    verbs:
   302    - create
   303    - delete
   304    - get
   305    - list
   306    - patch
   307    - update
   308    - watch
   309  - apiGroups:
   310    - apps.kubeblocks.io
   311    resources:
   312    - servicedescriptors/finalizers
   313    verbs:
   314    - update
   315  - apiGroups:
   316    - apps.kubeblocks.io
   317    resources:
   318    - servicedescriptors/status
   319    verbs:
   320    - get
   321    - patch
   322    - update
   323  - apiGroups:
   324    - batch
   325    resources:
   326    - cronjobs
   327    verbs:
   328    - create
   329    - delete
   330    - get
   331    - list
   332    - patch
   333    - update
   334    - watch
   335  - apiGroups:
   336    - batch
   337    resources:
   338    - cronjobs/finalizers
   339    verbs:
   340    - patch
   341    - update
   342  - apiGroups:
   343    - batch
   344    resources:
   345    - cronjobs/status
   346    verbs:
   347    - get
   348  - apiGroups:
   349    - batch
   350    resources:
   351    - jobs
   352    verbs:
   353    - create
   354    - delete
   355    - deletecollection
   356    - get
   357    - list
   358    - patch
   359    - update
   360    - watch
   361  - apiGroups:
   362    - batch
   363    resources:
   364    - jobs/finalizers
   365    verbs:
   366    - update
   367  - apiGroups:
   368    - batch
   369    resources:
   370    - jobs/status
   371    verbs:
   372    - get
   373  - apiGroups:
   374    - coordination.k8s.io
   375    resources:
   376    - leases
   377    verbs:
   378    - create
   379    - get
   380    - list
   381    - patch
   382    - update
   383    - watch
   384  - apiGroups:
   385    - ""
   386    resources:
   387    - configmap
   388    verbs:
   389    - create
   390    - delete
   391    - get
   392    - list
   393    - patch
   394    - update
   395    - watch
   396  - apiGroups:
   397    - ""
   398    resources:
   399    - configmap/finalizers
   400    verbs:
   401    - update
   402  - apiGroups:
   403    - ""
   404    resources:
   405    - configmaps
   406    verbs:
   407    - create
   408    - delete
   409    - deletecollection
   410    - get
   411    - list
   412    - patch
   413    - update
   414    - watch
   415  - apiGroups:
   416    - ""
   417    resources:
   418    - configmaps/finalizers
   419    verbs:
   420    - update
   421  - apiGroups:
   422    - ""
   423    resources:
   424    - endpoints
   425    verbs:
   426    - get
   427    - list
   428    - patch
   429    - update
   430    - watch
   431  - apiGroups:
   432    - ""
   433    resources:
   434    - events
   435    verbs:
   436    - create
   437    - get
   438    - list
   439    - patch
   440    - watch
   441  - apiGroups:
   442    - ""
   443    resources:
   444    - persistentvolumeclaims
   445    verbs:
   446    - create
   447    - delete
   448    - get
   449    - list
   450    - patch
   451    - update
   452    - watch
   453  - apiGroups:
   454    - ""
   455    resources:
   456    - persistentvolumeclaims/finalizers
   457    verbs:
   458    - update
   459  - apiGroups:
   460    - ""
   461    resources:
   462    - persistentvolumeclaims/status
   463    verbs:
   464    - get
   465    - patch
   466    - update
   467  - apiGroups:
   468    - ""
   469    resources:
   470    - persistentvolumes
   471    verbs:
   472    - get
   473    - list
   474    - patch
   475    - update
   476    - watch
   477  - apiGroups:
   478    - ""
   479    resources:
   480    - pods
   481    verbs:
   482    - delete
   483    - deletecollection
   484    - get
   485    - list
   486    - patch
   487    - update
   488    - watch
   489  - apiGroups:
   490    - ""
   491    resources:
   492    - pods/exec
   493    verbs:
   494    - create
   495  - apiGroups:
   496    - ""
   497    resources:
   498    - pods/finalizers
   499    verbs:
   500    - update
   501  - apiGroups:
   502    - ""
   503    resources:
   504    - pods/log
   505    verbs:
   506    - get
   507    - list
   508  - apiGroups:
   509    - ""
   510    resources:
   511    - resourcequotas
   512    verbs:
   513    - create
   514    - delete
   515    - get
   516    - list
   517    - patch
   518    - update
   519    - watch
   520  - apiGroups:
   521    - ""
   522    resources:
   523    - resourcequotas/finalizers
   524    verbs:
   525    - update
   526  - apiGroups:
   527    - ""
   528    resources:
   529    - resourcequotas/status
   530    verbs:
   531    - get
   532  - apiGroups:
   533    - ""
   534    resources:
   535    - secrets
   536    verbs:
   537    - create
   538    - delete
   539    - deletecollection
   540    - get
   541    - list
   542    - patch
   543    - update
   544    - watch
   545  - apiGroups:
   546    - ""
   547    resources:
   548    - secrets/finalizers
   549    verbs:
   550    - update
   551  - apiGroups:
   552    - ""
   553    resources:
   554    - serviceaccounts
   555    verbs:
   556    - get
   557    - list
   558    - watch
   559  - apiGroups:
   560    - ""
   561    resources:
   562    - serviceaccounts/status
   563    verbs:
   564    - get
   565  - apiGroups:
   566    - ""
   567    resources:
   568    - services
   569    verbs:
   570    - create
   571    - delete
   572    - deletecollection
   573    - get
   574    - list
   575    - patch
   576    - update
   577    - watch
   578  - apiGroups:
   579    - ""
   580    resources:
   581    - services/finalizers
   582    verbs:
   583    - update
   584  - apiGroups:
   585    - ""
   586    resources:
   587    - services/status
   588    verbs:
   589    - get
   590  - apiGroups:
   591    - dataprotection.kubeblocks.io
   592    resources:
   593    - actionsets
   594    verbs:
   595    - create
   596    - delete
   597    - get
   598    - list
   599    - patch
   600    - update
   601    - watch
   602  - apiGroups:
   603    - dataprotection.kubeblocks.io
   604    resources:
   605    - actionsets/finalizers
   606    verbs:
   607    - update
   608  - apiGroups:
   609    - dataprotection.kubeblocks.io
   610    resources:
   611    - actionsets/status
   612    verbs:
   613    - get
   614    - patch
   615    - update
   616  - apiGroups:
   617    - dataprotection.kubeblocks.io
   618    resources:
   619    - backuppolicies
   620    verbs:
   621    - create
   622    - delete
   623    - deletecollection
   624    - get
   625    - list
   626    - patch
   627    - update
   628    - watch
   629  - apiGroups:
   630    - dataprotection.kubeblocks.io
   631    resources:
   632    - backuppolicies/finalizers
   633    verbs:
   634    - update
   635  - apiGroups:
   636    - dataprotection.kubeblocks.io
   637    resources:
   638    - backuppolicies/status
   639    verbs:
   640    - get
   641    - patch
   642    - update
   643  - apiGroups:
   644    - dataprotection.kubeblocks.io
   645    resources:
   646    - backuprepos
   647    verbs:
   648    - create
   649    - delete
   650    - get
   651    - list
   652    - patch
   653    - update
   654    - watch
   655  - apiGroups:
   656    - dataprotection.kubeblocks.io
   657    resources:
   658    - backuprepos/finalizers
   659    verbs:
   660    - update
   661  - apiGroups:
   662    - dataprotection.kubeblocks.io
   663    resources:
   664    - backuprepos/status
   665    verbs:
   666    - get
   667    - patch
   668    - update
   669  - apiGroups:
   670    - dataprotection.kubeblocks.io
   671    resources:
   672    - backups
   673    verbs:
   674    - create
   675    - delete
   676    - deletecollection
   677    - get
   678    - list
   679    - patch
   680    - update
   681    - watch
   682  - apiGroups:
   683    - dataprotection.kubeblocks.io
   684    resources:
   685    - backups/finalizers
   686    verbs:
   687    - update
   688  - apiGroups:
   689    - dataprotection.kubeblocks.io
   690    resources:
   691    - backups/status
   692    verbs:
   693    - get
   694    - patch
   695    - update
   696  - apiGroups:
   697    - dataprotection.kubeblocks.io
   698    resources:
   699    - backupschedules
   700    verbs:
   701    - create
   702    - delete
   703    - get
   704    - list
   705    - patch
   706    - update
   707    - watch
   708  - apiGroups:
   709    - dataprotection.kubeblocks.io
   710    resources:
   711    - backupschedules/finalizers
   712    verbs:
   713    - update
   714  - apiGroups:
   715    - dataprotection.kubeblocks.io
   716    resources:
   717    - backupschedules/status
   718    verbs:
   719    - get
   720    - patch
   721    - update
   722  - apiGroups:
   723    - dataprotection.kubeblocks.io
   724    resources:
   725    - restores
   726    verbs:
   727    - create
   728    - delete
   729    - get
   730    - list
   731    - patch
   732    - update
   733    - watch
   734  - apiGroups:
   735    - dataprotection.kubeblocks.io
   736    resources:
   737    - restores/finalizers
   738    verbs:
   739    - update
   740  - apiGroups:
   741    - dataprotection.kubeblocks.io
   742    resources:
   743    - restores/status
   744    verbs:
   745    - get
   746    - patch
   747    - update
   748  - apiGroups:
   749    - extensions.kubeblocks.io
   750    resources:
   751    - addons
   752    verbs:
   753    - create
   754    - delete
   755    - get
   756    - list
   757    - patch
   758    - update
   759    - watch
   760  - apiGroups:
   761    - extensions.kubeblocks.io
   762    resources:
   763    - addons/finalizers
   764    verbs:
   765    - update
   766  - apiGroups:
   767    - extensions.kubeblocks.io
   768    resources:
   769    - addons/status
   770    verbs:
   771    - get
   772    - patch
   773    - update
   774  - apiGroups:
   775    - policy
   776    resources:
   777    - poddisruptionbudgets
   778    verbs:
   779    - create
   780    - delete
   781    - deletecollection
   782    - get
   783    - list
   784    - patch
   785    - update
   786    - watch
   787  - apiGroups:
   788    - policy
   789    resources:
   790    - poddisruptionbudgets/finalizers
   791    verbs:
   792    - update
   793  - apiGroups:
   794    - rbac.authorization.k8s.io
   795    resources:
   796    - clusterrolebindings
   797    verbs:
   798    - get
   799    - list
   800    - watch
   801  - apiGroups:
   802    - rbac.authorization.k8s.io
   803    resources:
   804    - clusterrolebindings/status
   805    verbs:
   806    - get
   807  - apiGroups:
   808    - rbac.authorization.k8s.io
   809    resources:
   810    - rolebindings
   811    verbs:
   812    - get
   813    - list
   814    - watch
   815  - apiGroups:
   816    - rbac.authorization.k8s.io
   817    resources:
   818    - rolebindings/status
   819    verbs:
   820    - get
   821  - apiGroups:
   822    - snapshot.storage.k8s.io
   823    resources:
   824    - volumesnapshotclasses
   825    verbs:
   826    - create
   827    - delete
   828    - get
   829    - list
   830    - patch
   831    - update
   832    - watch
   833  - apiGroups:
   834    - snapshot.storage.k8s.io
   835    resources:
   836    - volumesnapshotclasses/finalizers
   837    verbs:
   838    - patch
   839    - update
   840  - apiGroups:
   841    - snapshot.storage.k8s.io
   842    resources:
   843    - volumesnapshots
   844    verbs:
   845    - create
   846    - delete
   847    - get
   848    - list
   849    - patch
   850    - update
   851    - watch
   852  - apiGroups:
   853    - snapshot.storage.k8s.io
   854    resources:
   855    - volumesnapshots/finalizers
   856    verbs:
   857    - patch
   858    - update
   859  - apiGroups:
   860    - storage.k8s.io
   861    resources:
   862    - csidrivers
   863    verbs:
   864    - get
   865    - list
   866    - watch
   867  - apiGroups:
   868    - storage.k8s.io
   869    resources:
   870    - storageclasses
   871    verbs:
   872    - create
   873    - delete
   874    - get
   875    - list
   876    - watch
   877  - apiGroups:
   878    - storage.kubeblocks.io
   879    resources:
   880    - storageproviders
   881    verbs:
   882    - create
   883    - delete
   884    - get
   885    - list
   886    - patch
   887    - update
   888    - watch
   889  - apiGroups:
   890    - storage.kubeblocks.io
   891    resources:
   892    - storageproviders/finalizers
   893    verbs:
   894    - update
   895  - apiGroups:
   896    - storage.kubeblocks.io
   897    resources:
   898    - storageproviders/status
   899    verbs:
   900    - get
   901    - patch
   902    - update
   903  - apiGroups:
   904    - workloads.kubeblocks.io
   905    resources:
   906    - replicatedstatemachines
   907    verbs:
   908    - create
   909    - delete
   910    - get
   911    - list
   912    - patch
   913    - update
   914    - watch
   915  - apiGroups:
   916    - workloads.kubeblocks.io
   917    resources:
   918    - replicatedstatemachines/finalizers
   919    verbs:
   920    - update
   921  - apiGroups:
   922    - workloads.kubeblocks.io
   923    resources:
   924    - replicatedstatemachines/status
   925    verbs:
   926    - get
   927    - patch
   928    - update