github.com/argoproj/argo-cd@v1.8.7/cmd/argocd-util/commands/testdata/test_clusterrole.yaml (about) 1 aggregationRule: 2 clusterRoleSelectors: 3 - matchLabels: 4 rbac.authorization.k8s.io/aggregate-to-admin: "true" 5 apiVersion: rbac.authorization.k8s.io/v1 6 kind: ClusterRole 7 metadata: 8 labels: 9 kubernetes.io/bootstrapping: rbac-defaults 10 name: admin 11 rules: 12 - apiGroups: 13 - argoproj.io 14 resources: 15 - workflows 16 - workflows/finalizers 17 - workflowtemplates 18 - workflowtemplates/finalizers 19 - cronworkflows 20 - cronworkflows/finalizers 21 - clusterworkflowtemplates 22 - clusterworkflowtemplates/finalizers 23 verbs: 24 - create 25 - delete 26 - deletecollection 27 - get 28 - list 29 - patch 30 - update 31 - watch 32 - apiGroups: 33 - argoproj.io 34 resources: 35 - gateways 36 - gateways/finalizers 37 - sensors 38 - sensors/finalizers 39 - eventsources 40 - eventsources/finalizers 41 - eventbuses 42 - eventbuses/finalizers 43 verbs: 44 - create 45 - delete 46 - deletecollection 47 - get 48 - list 49 - patch 50 - update 51 - watch 52 - apiGroups: 53 - argoproj.io 54 resources: 55 - rollouts 56 - rollouts/scale 57 - experiments 58 - analysistemplates 59 - clusteranalysistemplates 60 - analysisruns 61 verbs: 62 - create 63 - delete 64 - deletecollection 65 - get 66 - list 67 - patch 68 - update 69 - watch 70 - apiGroups: 71 - metrics.k8s.io 72 resources: 73 - pods 74 verbs: 75 - get 76 - list 77 - watch 78 - apiGroups: 79 - iammanager.keikoproj.io 80 resources: 81 - iamroles 82 verbs: 83 - get 84 - list 85 - watch 86 - apiGroups: 87 - "" 88 resources: 89 - pods/attach 90 - pods/exec 91 - pods/portforward 92 - pods/proxy 93 - secrets 94 - services/proxy 95 verbs: 96 - get 97 - list 98 - watch 99 - apiGroups: 100 - "" 101 resources: 102 - serviceaccounts 103 verbs: 104 - impersonate 105 - apiGroups: 106 - "" 107 resources: 108 - pods 109 - pods/attach 110 - pods/exec 111 - pods/portforward 112 - pods/proxy 113 verbs: 114 - create 115 - delete 116 - deletecollection 117 - patch 118 - update 119 - apiGroups: 120 - "" 121 resources: 122 - configmaps 123 - endpoints 124 - persistentvolumeclaims 125 - replicationcontrollers 126 - replicationcontrollers/scale 127 - secrets 128 - serviceaccounts 129 - services 130 - services/proxy 131 verbs: 132 - create 133 - delete 134 - deletecollection 135 - patch 136 - update 137 - apiGroups: 138 - apps 139 resources: 140 - daemonsets 141 - deployments 142 - deployments/rollback 143 - deployments/scale 144 - replicasets 145 - replicasets/scale 146 - statefulsets 147 - statefulsets/scale 148 verbs: 149 - create 150 - delete 151 - deletecollection 152 - patch 153 - update 154 - apiGroups: 155 - autoscaling 156 resources: 157 - horizontalpodautoscalers 158 verbs: 159 - create 160 - delete 161 - deletecollection 162 - patch 163 - update 164 - apiGroups: 165 - batch 166 resources: 167 - cronjobs 168 - jobs 169 verbs: 170 - create 171 - delete 172 - deletecollection 173 - patch 174 - update 175 - apiGroups: 176 - extensions 177 resources: 178 - daemonsets 179 - deployments 180 - deployments/rollback 181 - deployments/scale 182 - ingresses 183 - networkpolicies 184 - replicasets 185 - replicasets/scale 186 - replicationcontrollers/scale 187 verbs: 188 - create 189 - delete 190 - deletecollection 191 - patch 192 - update 193 - apiGroups: 194 - policy 195 resources: 196 - poddisruptionbudgets 197 verbs: 198 - create 199 - delete 200 - deletecollection 201 - patch 202 - update 203 - apiGroups: 204 - networking.k8s.io 205 resources: 206 - networkpolicies 207 verbs: 208 - create 209 - delete 210 - deletecollection 211 - patch 212 - update 213 - apiGroups: 214 - networking.k8s.io 215 resources: 216 - ingresses 217 verbs: 218 - create 219 - apiGroups: 220 - networking.k8s.io 221 resources: 222 - ingresses 223 verbs: 224 - delete 225 - apiGroups: 226 - networking.k8s.io 227 resources: 228 - ingresses 229 verbs: 230 - deletecollection 231 - apiGroups: 232 - networking.k8s.io 233 resources: 234 - ingresses 235 verbs: 236 - patch 237 - apiGroups: 238 - networking.k8s.io 239 resources: 240 - ingresses 241 verbs: 242 - update 243 - apiGroups: 244 - argoproj.io 245 resources: 246 - workflows 247 - workflows/finalizers 248 - workflowtemplates 249 - workflowtemplates/finalizers 250 - cronworkflows 251 - cronworkflows/finalizers 252 - clusterworkflowtemplates 253 - clusterworkflowtemplates/finalizers 254 verbs: 255 - get 256 - list 257 - watch 258 - apiGroups: 259 - argoproj.io 260 resources: 261 - gateways 262 - gateways/finalizers 263 - sensors 264 - sensors/finalizers 265 - eventsources 266 - eventsources/finalizers 267 - eventbuses 268 - eventbuses/finalizers 269 verbs: 270 - get 271 - list 272 - watch 273 - apiGroups: 274 - argoproj.io 275 resources: 276 - rollouts 277 - rollouts/scale 278 - experiments 279 - analysistemplates 280 - clusteranalysistemplates 281 - analysisruns 282 verbs: 283 - get 284 - list 285 - watch 286 - apiGroups: 287 - "" 288 resourceNames: 289 - prometheus-k8s-prometheus-1 290 - prometheus-k8s-prometheus-0 291 resources: 292 - pods/portforward 293 verbs: 294 - create 295 - apiGroups: 296 - networking.istio.io 297 resources: 298 - virtualservices 299 - destinationrules 300 - serviceentries 301 - envoyfilters 302 - gateways 303 - sidecars 304 verbs: 305 - get 306 - list 307 - watch 308 - apiGroups: 309 - "" 310 resources: 311 - configmaps 312 - endpoints 313 - persistentvolumeclaims 314 - pods 315 - replicationcontrollers 316 - replicationcontrollers/scale 317 - serviceaccounts 318 - services 319 verbs: 320 - get 321 - list 322 - watch 323 - apiGroups: 324 - "" 325 resources: 326 - bindings 327 - events 328 - limitranges 329 - namespaces/status 330 - pods/log 331 - pods/status 332 - replicationcontrollers/status 333 - resourcequotas 334 - resourcequotas/status 335 verbs: 336 - get 337 - list 338 - watch 339 - apiGroups: 340 - "" 341 resources: 342 - namespaces 343 verbs: 344 - get 345 - list 346 - watch 347 - apiGroups: 348 - apps 349 resources: 350 - daemonsets 351 - deployments 352 - deployments/scale 353 - replicasets 354 - replicasets/scale 355 - statefulsets 356 - statefulsets/scale 357 verbs: 358 - get 359 - list 360 - watch 361 - apiGroups: 362 - autoscaling 363 resources: 364 - horizontalpodautoscalers 365 verbs: 366 - get 367 - list 368 - watch 369 - apiGroups: 370 - batch 371 resources: 372 - cronjobs 373 - jobs 374 verbs: 375 - get 376 - list 377 - watch 378 - apiGroups: 379 - extensions 380 resources: 381 - daemonsets 382 - deployments 383 - deployments/scale 384 - ingresses 385 - networkpolicies 386 - replicasets 387 - replicasets/scale 388 - replicationcontrollers/scale 389 verbs: 390 - get 391 - list 392 - watch 393 - apiGroups: 394 - policy 395 resources: 396 - poddisruptionbudgets 397 verbs: 398 - get 399 - list 400 - watch 401 - apiGroups: 402 - networking.k8s.io 403 resources: 404 - networkpolicies 405 verbs: 406 - get 407 - list 408 - watch 409 - apiGroups: 410 - apps 411 resources: 412 - controllerrevisions 413 verbs: 414 - get 415 - apiGroups: 416 - apps 417 resources: 418 - controllerrevisions 419 verbs: 420 - list 421 - apiGroups: 422 - apps 423 resources: 424 - controllerrevisions 425 verbs: 426 - watch 427 - apiGroups: 428 - networking.k8s.io 429 resources: 430 - ingresses 431 verbs: 432 - get 433 - apiGroups: 434 - networking.k8s.io 435 resources: 436 - ingresses 437 verbs: 438 - list 439 - apiGroups: 440 - networking.k8s.io 441 resources: 442 - ingresses 443 verbs: 444 - watch 445 - apiGroups: 446 - "" 447 resources: 448 - persistentvolumeclaims/status 449 verbs: 450 - get 451 - apiGroups: 452 - "" 453 resources: 454 - persistentvolumeclaims/status 455 verbs: 456 - list 457 - apiGroups: 458 - "" 459 resources: 460 - persistentvolumeclaims/status 461 verbs: 462 - watch 463 - apiGroups: 464 - "" 465 resources: 466 - services/status 467 verbs: 468 - get 469 - apiGroups: 470 - "" 471 resources: 472 - services/status 473 verbs: 474 - list 475 - apiGroups: 476 - "" 477 resources: 478 - services/status 479 verbs: 480 - watch 481 - apiGroups: 482 - apps 483 resources: 484 - daemonsets/status 485 verbs: 486 - get 487 - apiGroups: 488 - apps 489 resources: 490 - daemonsets/status 491 verbs: 492 - list 493 - apiGroups: 494 - apps 495 resources: 496 - daemonsets/status 497 verbs: 498 - watch 499 - apiGroups: 500 - apps 501 resources: 502 - deployments/status 503 verbs: 504 - get 505 - apiGroups: 506 - apps 507 resources: 508 - deployments/status 509 verbs: 510 - list 511 - apiGroups: 512 - apps 513 resources: 514 - deployments/status 515 verbs: 516 - watch 517 - apiGroups: 518 - apps 519 resources: 520 - replicasets/status 521 verbs: 522 - get 523 - apiGroups: 524 - apps 525 resources: 526 - replicasets/status 527 verbs: 528 - list 529 - apiGroups: 530 - apps 531 resources: 532 - replicasets/status 533 verbs: 534 - watch 535 - apiGroups: 536 - apps 537 resources: 538 - statefulsets/status 539 verbs: 540 - get 541 - apiGroups: 542 - apps 543 resources: 544 - statefulsets/status 545 verbs: 546 - list 547 - apiGroups: 548 - apps 549 resources: 550 - statefulsets/status 551 verbs: 552 - watch 553 - apiGroups: 554 - autoscaling 555 resources: 556 - horizontalpodautoscalers/status 557 verbs: 558 - get 559 - apiGroups: 560 - autoscaling 561 resources: 562 - horizontalpodautoscalers/status 563 verbs: 564 - list 565 - apiGroups: 566 - autoscaling 567 resources: 568 - horizontalpodautoscalers/status 569 verbs: 570 - watch 571 - apiGroups: 572 - batch 573 resources: 574 - cronjobs/status 575 verbs: 576 - get 577 - apiGroups: 578 - batch 579 resources: 580 - cronjobs/status 581 verbs: 582 - list 583 - apiGroups: 584 - batch 585 resources: 586 - cronjobs/status 587 verbs: 588 - watch 589 - apiGroups: 590 - batch 591 resources: 592 - jobs/status 593 verbs: 594 - get 595 - apiGroups: 596 - batch 597 resources: 598 - jobs/status 599 verbs: 600 - list 601 - apiGroups: 602 - batch 603 resources: 604 - jobs/status 605 verbs: 606 - watch 607 - apiGroups: 608 - extensions 609 resources: 610 - daemonsets/status 611 verbs: 612 - get 613 - apiGroups: 614 - extensions 615 resources: 616 - daemonsets/status 617 verbs: 618 - list 619 - apiGroups: 620 - extensions 621 resources: 622 - daemonsets/status 623 verbs: 624 - watch 625 - apiGroups: 626 - extensions 627 resources: 628 - deployments/status 629 verbs: 630 - get 631 - apiGroups: 632 - extensions 633 resources: 634 - deployments/status 635 verbs: 636 - list 637 - apiGroups: 638 - extensions 639 resources: 640 - deployments/status 641 verbs: 642 - watch 643 - apiGroups: 644 - extensions 645 resources: 646 - ingresses/status 647 verbs: 648 - get 649 - apiGroups: 650 - extensions 651 resources: 652 - ingresses/status 653 verbs: 654 - list 655 - apiGroups: 656 - extensions 657 resources: 658 - ingresses/status 659 verbs: 660 - watch 661 - apiGroups: 662 - extensions 663 resources: 664 - replicasets/status 665 verbs: 666 - get 667 - apiGroups: 668 - extensions 669 resources: 670 - replicasets/status 671 verbs: 672 - list 673 - apiGroups: 674 - extensions 675 resources: 676 - replicasets/status 677 verbs: 678 - watch 679 - apiGroups: 680 - policy 681 resources: 682 - poddisruptionbudgets/status 683 verbs: 684 - get 685 - apiGroups: 686 - policy 687 resources: 688 - poddisruptionbudgets/status 689 verbs: 690 - list 691 - apiGroups: 692 - policy 693 resources: 694 - poddisruptionbudgets/status 695 verbs: 696 - watch 697 - apiGroups: 698 - networking.k8s.io 699 resources: 700 - ingresses/status 701 verbs: 702 - get 703 - apiGroups: 704 - networking.k8s.io 705 resources: 706 - ingresses/status 707 verbs: 708 - list 709 - apiGroups: 710 - networking.k8s.io 711 resources: 712 - ingresses/status 713 verbs: 714 - watch 715 - apiGroups: 716 - "" 717 resources: 718 - events 719 verbs: 720 - create 721 - patch 722 - apiGroups: 723 - extensions 724 - networking.k8s.io 725 resources: 726 - ingresses/status 727 verbs: 728 - update 729 - apiGroups: 730 - monitoring.coreos.com 731 resources: 732 - prometheusrules 733 verbs: 734 - get 735 - watch 736 - list 737 - update 738 - delete 739 - create 740 - apiGroups: 741 - hpa.orkaproj.io 742 resources: 743 - hpaalgoes 744 verbs: 745 - get 746 - watch 747 - list 748 - update 749 - delete 750 - create 751 - apiGroups: 752 - networking.istio.io 753 resources: 754 - virtualservices 755 - destinationrules 756 - serviceentries 757 - envoyfilters 758 - gateways 759 - sidecars 760 verbs: 761 - get 762 - list 763 - create 764 - update 765 - delete 766 - patch 767 - watch 768 - apiGroups: 769 - authorization.k8s.io 770 resources: 771 - localsubjectaccessreviews 772 verbs: 773 - create 774 - apiGroups: 775 - rbac.authorization.k8s.io 776 resources: 777 - rolebindings 778 - roles 779 verbs: 780 - create 781 - delete 782 - deletecollection 783 - get 784 - list 785 - patch 786 - update 787 - watch