github.com/IBM-Blockchain/fabric-operator@v1.0.4/testdata/deploy/role_ocp.yaml (about)

     1  #
     2  # Copyright contributors to the Hyperledger Fabric Operator project
     3  #
     4  # SPDX-License-Identifier: Apache-2.0
     5  #
     6  # Licensed under the Apache License, Version 2.0 (the "License");
     7  # you may not use this file except in compliance with the License.
     8  # You may obtain a copy of the License at:
     9  #
    10  # 	  http://www.apache.org/licenses/LICENSE-2.0
    11  #
    12  # Unless required by applicable law or agreed to in writing, software
    13  # distributed under the License is distributed on an "AS IS" BASIS,
    14  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    15  # See the License for the specific language governing permissions and
    16  # limitations under the License.
    17  #
    18  
    19  apiVersion: rbac.authorization.k8s.io/v1
    20  kind: ClusterRole
    21  metadata:
    22    name: operator
    23    labels:
    24      release: "operator"
    25  rules:
    26    - apiGroups:
    27        - apiextensions.k8s.io
    28      resources:
    29        - persistentvolumeclaims
    30        - persistentvolumes
    31      verbs:
    32        - get
    33        - list
    34        - create
    35        - update
    36        - patch
    37        - watch
    38        - delete
    39        - deletecollection
    40    - apiGroups:
    41        - apiextensions.k8s.io
    42      resources:
    43        - customresourcedefinitions
    44      verbs:
    45        - get
    46    - apiGroups:
    47        - routes.route.openshift.io
    48      resources:
    49        - routes
    50        - routes/custom-host
    51      verbs:
    52        - get
    53        - list
    54        - create
    55        - update
    56        - patch
    57        - watch
    58        - delete
    59        - deletecollection
    60    - apiGroups:
    61        - ""
    62      resources:
    63        - pods
    64        - pods/log
    65        - services
    66        - endpoints
    67        - persistentvolumeclaims
    68        - persistentvolumes
    69        - events
    70        - configmaps
    71        - secrets
    72        - ingresses
    73        - roles
    74        - rolebindings
    75        - serviceaccounts
    76        - nodes
    77        - jobs
    78      verbs:
    79        - get
    80        - list
    81        - create
    82        - update
    83        - patch
    84        - watch
    85        - delete
    86        - deletecollection
    87    - apiGroups:
    88        - ""
    89      resources:
    90        - namespaces
    91      verbs:
    92        - get
    93    - apiGroups:
    94        - apps
    95      resources:
    96        - deployments
    97        - daemonsets
    98        - replicasets
    99        - statefulsets
   100      verbs:
   101        - get
   102        - list
   103        - create
   104        - update
   105        - patch
   106        - watch
   107        - delete
   108        - deletecollection
   109    - apiGroups:
   110        - monitoring.coreos.com
   111      resources:
   112        - servicemonitors
   113      verbs:
   114        - get
   115        - create
   116    - apiGroups:
   117        - apps
   118      resourceNames:
   119        - operator
   120      resources:
   121        - deployments/finalizers
   122      verbs:
   123        - update
   124    - apiGroups:
   125        - ibp.com
   126      resources:
   127        - ibpcas.ibp.com
   128        - ibppeers.ibp.com
   129        - ibporderers.ibp.com
   130        - ibpconsoles.ibp.com
   131      verbs:
   132        - get
   133        - list
   134        - create
   135        - update
   136        - patch
   137        - watch
   138        - delete
   139        - deletecollection
   140    - apiGroups:
   141        - config.openshift.io
   142      resources:
   143        - v1
   144      verbs:
   145        - get
   146        - list
   147        - create
   148        - update
   149        - patch
   150        - watch
   151        - delete
   152        - deletecollection