github.com/verrazzano/verrazzano@v1.7.0/platform-operator/helm_config/charts/verrazzano-application-operator/templates/clusterrole.yaml (about)

     1  # Copyright (c) 2020, 2023, Oracle and/or its affiliates.
     2  # Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl.
     3  ---
     4  apiVersion: rbac.authorization.k8s.io/v1
     5  kind: ClusterRole
     6  metadata:
     7    name: verrazzano-application-operator
     8  rules:
     9    - apiGroups:
    10        - ""
    11      resources:
    12        - configmaps
    13        - namespaces
    14        - pods
    15        - secrets
    16        - rolebindings
    17        - serviceaccounts
    18        - services
    19        - persistentvolumeclaims
    20        - persistentvolumes
    21      verbs:
    22        - create
    23        - delete
    24        - deletecollection
    25        - get
    26        - list
    27        - patch
    28        - update
    29        - watch
    30    - apiGroups:
    31        - apps
    32      resources:
    33        - deployments
    34        - statefulsets
    35        - replicasets
    36        - daemonsets
    37      verbs:
    38        - create
    39        - delete
    40        - deletecollection
    41        - get
    42        - list
    43        - patch
    44        - update
    45        - watch
    46    - apiGroups:
    47        - extensions
    48      resources:
    49        - ingresses
    50      verbs:
    51        - get
    52        - list
    53        - watch
    54    - apiGroups:
    55        - batch
    56      resources:
    57        - jobs
    58        - cronjobs
    59      verbs:
    60        - get
    61        - list
    62        - watch
    63    - apiGroups:
    64        - apiextensions.k8s.io
    65      resources:
    66        - customresourcedefinitions
    67      verbs:
    68        - create
    69        - delete
    70        - deletecollection
    71        - get
    72        - list
    73        - patch
    74        - update
    75        - watch
    76    - apiGroups:
    77        - admissionregistration.k8s.io
    78      resources:
    79        - mutatingwebhookconfigurations
    80        - validatingwebhookconfigurations
    81      verbs:
    82        - create
    83        - delete
    84        - deletecollection
    85        - get
    86        - list
    87        - patch
    88        - update
    89        - watch
    90    - apiGroups:
    91        - networking.k8s.io
    92      resources:
    93        - ingresses
    94      verbs:
    95        - get
    96        - list
    97        - watch
    98    - apiGroups:
    99        - networking.k8s.io
   100      resources:
   101        - networkpolicies
   102      verbs:
   103        - create
   104        - delete
   105        - deletecollection
   106        - get
   107        - list
   108        - patch
   109        - update
   110        - watch
   111    - apiGroups:
   112        - rbac.authorization.k8s.io
   113      resources:
   114        - clusterroles
   115        - roles
   116        - rolebindings
   117      verbs:
   118        - bind
   119        - create
   120        - delete
   121        - deletecollection
   122        - get
   123        - list
   124        - patch
   125        - update
   126        - watch
   127    - apiGroups:
   128        - cert-manager.io
   129      resources:
   130        - certificates
   131      verbs:
   132        - create
   133        - delete
   134        - deletecollection
   135        - get
   136        - list
   137        - patch
   138        - update
   139        - watch
   140    - apiGroups:
   141        - clusters.verrazzano.io
   142      resources:
   143        - '*'
   144        - '*/status'
   145      verbs:
   146        - create
   147        - delete
   148        - deletecollection
   149        - get
   150        - list
   151        - patch
   152        - update
   153        - watch
   154    - apiGroups:
   155        - coherence.oracle.com
   156      resources:
   157        - coherence
   158        - coherence/status
   159      verbs:
   160        - create
   161        - delete
   162        - deletecollection
   163        - get
   164        - list
   165        - patch
   166        - update
   167        - watch
   168    - apiGroups:
   169        - core.oam.dev
   170      resources:
   171        - '*'
   172        - '*/status'
   173      verbs:
   174        - create
   175        - delete
   176        - deletecollection
   177        - get
   178        - list
   179        - patch
   180        - update
   181        - watch
   182    - apiGroups:
   183        - networking.istio.io
   184      resources:
   185        - destinationrules
   186        - ingresses
   187        - gateways
   188        - virtualservices
   189      verbs:
   190        - create
   191        - delete
   192        - deletecollection
   193        - get
   194        - list
   195        - patch
   196        - update
   197        - watch
   198    - apiGroups:
   199        - verrazzano.io
   200      resources:
   201        - '*'
   202        - '*/status'
   203      verbs:
   204        - create
   205        - delete
   206        - deletecollection
   207        - get
   208        - list
   209        - patch
   210        - update
   211        - watch
   212    - apiGroups:
   213        - oam.verrazzano.io
   214      resources:
   215        - '*'
   216        - '*/status'
   217      verbs:
   218        - create
   219        - delete
   220        - deletecollection
   221        - get
   222        - list
   223        - patch
   224        - update
   225        - watch
   226    - apiGroups:
   227        - app.verrazzano.io
   228      resources:
   229        - '*'
   230        - '*/status'
   231      verbs:
   232        - create
   233        - delete
   234        - deletecollection
   235        - get
   236        - list
   237        - patch
   238        - update
   239        - watch
   240    - apiGroups:
   241        - security.istio.io
   242      resources:
   243        - authorizationpolicies
   244      verbs:
   245        - create
   246        - delete
   247        - deletecollection
   248        - get
   249        - list
   250        - patch
   251        - update
   252        - watch
   253    - apiGroups:
   254        - weblogic.oracle
   255      resources:
   256        - domains
   257        - domains/status
   258        - clusters
   259        - clusters/status
   260      verbs:
   261        - create
   262        - delete
   263        - deletecollection
   264        - get
   265        - list
   266        - patch
   267        - update
   268        - watch
   269    - apiGroups:
   270        - monitoring.coreos.com
   271      resources:
   272        - servicemonitors
   273        - podmonitors
   274      verbs:
   275        - create
   276        - delete
   277        - deletecollection
   278        - get
   279        - list
   280        - patch
   281        - update
   282        - watch
   283    - apiGroups:
   284        - mysql.oracle.com
   285      resources:
   286        - innodbclusters
   287      verbs:
   288        - create
   289        - delete
   290        - get
   291        - list
   292        - update
   293        - watch
   294    - apiGroups:
   295        - jaegertracing.io
   296      resources:
   297        - jaegers
   298      verbs:
   299        - create
   300        - get
   301        - list
   302        - update
   303    - apiGroups:
   304        - mysql.oracle.com
   305      resources:
   306        - mysqlbackups
   307      verbs:
   308        - create
   309        - get
   310        - list
   311        - patch
   312        - update
   313        - watch
   314        - delete
   315    - apiGroups:
   316        - mysql.oracle.com
   317      resources:
   318        - mysqlbackups/status
   319      verbs:
   320        - get
   321        - patch
   322        - update
   323        - watch