github.com/argoproj/argo-events@v1.9.1/manifests/namespace-install/rbac/argo-events-role.yaml (about) 1 apiVersion: rbac.authorization.k8s.io/v1 2 kind: Role 3 metadata: 4 name: argo-events-role 5 rules: 6 - apiGroups: 7 - "" 8 resources: 9 - "events" 10 verbs: 11 - "create" 12 - "patch" 13 - apiGroups: 14 - coordination.k8s.io 15 resources: 16 - leases 17 verbs: 18 - get 19 - list 20 - watch 21 - create 22 - update 23 - patch 24 - delete 25 - apiGroups: 26 - argoproj.io 27 verbs: 28 - create 29 - delete 30 - deletecollection 31 - get 32 - list 33 - patch 34 - update 35 - watch 36 resources: 37 - sensors 38 - sensors/finalizers 39 - sensors/status 40 - eventsources 41 - eventsources/finalizers 42 - eventsources/status 43 - eventbus 44 - eventbus/finalizers 45 - eventbus/status 46 - apiGroups: 47 - "" 48 resources: 49 - pods 50 - pods/exec 51 - configmaps 52 - services 53 - persistentvolumeclaims 54 verbs: 55 - create 56 - get 57 - list 58 - watch 59 - update 60 - patch 61 - delete 62 # Secrets privileges are used to manage the NATs auth secrets. This can be removed from the ClusterRole and granted granularly per Namespace as needed 63 - apiGroups: 64 - "" 65 resources: 66 - secrets 67 verbs: 68 - create 69 - get 70 - update 71 - list 72 - patch 73 - delete 74 - apiGroups: 75 - apps 76 resources: 77 - deployments 78 - statefulsets 79 verbs: 80 - create 81 - get 82 - list 83 - watch 84 - update 85 - patch 86 - delete