github.com/operator-framework/operator-lifecycle-manager@v0.30.0/deploy/upstream/manifests/0.11.0/0000_50_olm_09-aggregated.clusterrole.yaml (about)

     1  ##---
     2  # Source: olm/templates/0000_50_olm_09-aggregated.clusterrole.yaml
     3  kind: ClusterRole
     4  apiVersion: rbac.authorization.k8s.io/v1
     5  metadata:
     6    name: aggregate-olm-edit
     7    labels:
     8      # Add these permissions to the "admin" and "edit" default roles.
     9      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    10      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    11  rules:
    12  - apiGroups: ["operators.coreos.com"]
    13    resources: ["subscriptions"]
    14    verbs: ["create", "update", "patch", "delete"]
    15  - apiGroups: ["operators.coreos.com"]
    16    resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions"]
    17    verbs: ["delete"]
    18  ---
    19  kind: ClusterRole
    20  apiVersion: rbac.authorization.k8s.io/v1
    21  metadata:
    22    name: aggregate-olm-view
    23    labels:
    24      # Add these permissions to the "admin", "edit" and "view" default roles
    25      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    26      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    27      rbac.authorization.k8s.io/aggregate-to-view: "true"
    28  rules:
    29  - apiGroups: ["operators.coreos.com"]
    30    resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups"]
    31    verbs: ["get", "list", "watch"]
    32  - apiGroups: ["packages.operators.coreos.com"]
    33    resources: ["packagemanifests"]
    34    verbs: ["get", "list", "watch"]