github.com/operator-framework/operator-lifecycle-manager@v0.30.0/deploy/chart/templates/0000_50_olm_09-aggregated.clusterrole.yaml (about)

     1  kind: ClusterRole
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  metadata:
     4    name: aggregate-olm-edit
     5    labels:
     6      # Add these permissions to the "admin" and "edit" default roles.
     7      rbac.authorization.k8s.io/aggregate-to-admin: "true"
     8      rbac.authorization.k8s.io/aggregate-to-edit: "true"
     9  rules:
    10  - apiGroups: ["operators.coreos.com"]
    11    resources: ["subscriptions"]
    12    verbs: ["create", "update", "patch", "delete"]
    13  - apiGroups: ["operators.coreos.com"]
    14    resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions"]
    15    verbs: ["delete"]
    16  ---
    17  kind: ClusterRole
    18  apiVersion: rbac.authorization.k8s.io/v1
    19  metadata:
    20    name: aggregate-olm-view
    21    labels:
    22      # Add these permissions to the "admin", "edit" and "view" default roles
    23      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    24      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    25      rbac.authorization.k8s.io/aggregate-to-view: "true"
    26  rules:
    27  - apiGroups: ["operators.coreos.com"]
    28    resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups"]
    29    verbs: ["get", "list", "watch"]
    30  - apiGroups: ["packages.operators.coreos.com"]
    31    resources: ["packagemanifests", "packagemanifests/icon"]
    32    verbs: ["get", "list", "watch"]