github.com/IBM-Blockchain/fabric-operator@v1.0.4/testdata/deploy/role.yaml (about)

     1  #
     2  # Copyright contributors to the Hyperledger Fabric Operator project
     3  #
     4  # SPDX-License-Identifier: Apache-2.0
     5  #
     6  # Licensed under the Apache License, Version 2.0 (the "License");
     7  # you may not use this file except in compliance with the License.
     8  # You may obtain a copy of the License at:
     9  #
    10  # 	  http://www.apache.org/licenses/LICENSE-2.0
    11  #
    12  # Unless required by applicable law or agreed to in writing, software
    13  # distributed under the License is distributed on an "AS IS" BASIS,
    14  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    15  # See the License for the specific language governing permissions and
    16  # limitations under the License.
    17  #
    18  
    19  apiVersion: rbac.authorization.k8s.io/v1
    20  kind: ClusterRole
    21  metadata:
    22    name: operator
    23    labels:
    24      release: "operator"
    25  rules:
    26    - apiGroups:
    27        - apiextensions.k8s.io
    28      resources:
    29        - persistentvolumeclaims
    30        - persistentvolumes
    31      verbs:
    32        - get
    33        - list
    34        - create
    35        - update
    36        - patch
    37        - watch
    38        - delete
    39        - deletecollection
    40    - apiGroups:
    41        - apiextensions.k8s.io
    42      resources:
    43        - customresourcedefinitions
    44      verbs:
    45        - get
    46    - apiGroups:
    47        - route.openshift.io
    48      resources:
    49        - routes
    50        - routes/custom-host
    51      verbs:
    52        - get
    53        - list
    54        - create
    55        - update
    56        - patch
    57        - watch
    58        - delete
    59        - deletecollection
    60    - apiGroups:
    61        - ""
    62      resources:
    63        - pods
    64        - pods/log
    65        - persistentvolumeclaims
    66        - persistentvolumes
    67        - services
    68        - endpoints
    69        - events
    70        - configmaps
    71        - secrets
    72        - nodes
    73        - serviceaccounts
    74      verbs:
    75        - get
    76        - list
    77        - create
    78        - update
    79        - patch
    80        - watch
    81        - delete
    82        - deletecollection
    83    - apiGroups:
    84        - "batch"
    85      resources:
    86        - jobs
    87      verbs:
    88        - get
    89        - list
    90        - create
    91        - update
    92        - patch
    93        - watch
    94        - delete
    95        - deletecollection
    96    - apiGroups:
    97        - "authorization.openshift.io"
    98        - "rbac.authorization.k8s.io"
    99      resources:
   100        - roles
   101        - rolebindings
   102      verbs:
   103        - get
   104        - list
   105        - create
   106        - update
   107        - patch
   108        - watch
   109        - delete
   110        - deletecollection
   111        - bind
   112        - escalate
   113    - apiGroups:
   114        - ""
   115      resources:
   116        - namespaces
   117      verbs:
   118        - get
   119    - apiGroups:
   120        - apps
   121      resources:
   122        - deployments
   123        - daemonsets
   124        - replicasets
   125        - statefulsets
   126      verbs:
   127        - get
   128        - list
   129        - create
   130        - update
   131        - patch
   132        - watch
   133        - delete
   134        - deletecollection
   135    - apiGroups:
   136        - monitoring.coreos.com
   137      resources:
   138        - servicemonitors
   139      verbs:
   140        - get
   141        - create
   142    - apiGroups:
   143        - apps
   144      resourceNames:
   145        - operator
   146      resources:
   147        - deployments/finalizers
   148      verbs:
   149        - update
   150    - apiGroups:
   151        - ibp.com
   152      resources:
   153        - ibpcas.ibp.com
   154        - ibppeers.ibp.com
   155        - ibporderers.ibp.com
   156        - ibpconsoles.ibp.com
   157        - ibpcas
   158        - ibppeers
   159        - ibporderers
   160        - ibpconsoles
   161        - ibpcas/finalizers
   162        - ibppeers/finalizers
   163        - ibporderers/finalizers
   164        - ibpconsoles/finalizers
   165        - ibpcas/status
   166        - ibppeers/status
   167        - ibporderers/status
   168        - ibpconsoles/status
   169      verbs:
   170        - get
   171        - list
   172        - create
   173        - update
   174        - patch
   175        - watch
   176        - delete
   177        - deletecollection
   178    - apiGroups:
   179        - extensions
   180        - networking.k8s.io
   181        - config.openshift.io
   182      resources:
   183        - ingresses
   184      verbs:
   185        - get
   186        - list
   187        - create
   188        - update
   189        - patch
   190        - watch
   191        - delete
   192        - deletecollection