github.com/verrazzano/verrazzano@v1.7.0/platform-operator/helm_config/charts/verrazzano-cluster-operator/templates/clusterrole.yaml (about)

     1  # Copyright (C) 2022, 2023, Oracle and/or its affiliates.
     2  # Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl.
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  kind: ClusterRole
     5  metadata:
     6    name: verrazzano-cluster-operator
     7  rules:
     8    - apiGroups:
     9      - admissionregistration.k8s.io
    10      resources:
    11      - validatingwebhookconfigurations
    12      - mutatingwebhookconfigurations
    13      verbs:
    14      - create
    15      - get
    16      - list
    17      - patch
    18      - update
    19    - apiGroups:
    20        - apiextensions.k8s.io
    21      resources:
    22        - customresourcedefinitions
    23      verbs:
    24        - get
    25        - list
    26        - watch
    27    - apiGroups:
    28        - networking.istio.io
    29      resources:
    30        - destinationrules
    31        - serviceentries
    32      verbs:
    33        - create
    34        - update
    35        - delete
    36        - get
    37        - list
    38        - watch
    39    - apiGroups:
    40        - clusters.verrazzano.io
    41      resources:
    42        - verrazzanomanagedclusters
    43        - verrazzanomanagedclusters/status
    44        - ocneociquickcreates
    45        - ocneociquickcreates/status
    46        - okequickcreates
    47        - okequickcreates/status
    48      verbs:
    49        - create
    50        - update
    51        - delete
    52        - get
    53        - list
    54        - patch
    55        - watch
    56    - apiGroups:
    57        - install.verrazzano.io
    58      resources:
    59        - verrazzanos
    60      verbs:
    61        - get
    62        - list
    63        - watch
    64    - apiGroups:
    65        - ""
    66      resources:
    67        - serviceaccounts
    68        - configmaps
    69        - endpoints
    70        - secrets
    71        - services
    72        - pods/exec
    73        - namespaces
    74      verbs:
    75        - create
    76        - get
    77        - list
    78        - update
    79        - watch
    80        - delete
    81    - apiGroups:
    82        - ""
    83      resources:
    84        - pods
    85      verbs:
    86        - get
    87        - list
    88        - watch
    89    - apiGroups:
    90        - apps
    91      resources:
    92        - deployments
    93      verbs:
    94        - get
    95        - list
    96        - update
    97        - watch
    98    - apiGroups:
    99        - networking.k8s.io
   100      resources:
   101        - ingresses
   102      verbs:
   103        - get
   104        - list
   105        - watch
   106    - apiGroups:
   107        - rbac.authorization.k8s.io
   108      resources:
   109        - rolebindings
   110      verbs:
   111        - create
   112        - get
   113        - list
   114        - update
   115        - watch
   116    - apiGroups:
   117        - management.cattle.io
   118      resources:
   119        - clusters
   120        - users
   121      verbs:
   122        - update
   123        - get
   124        - list
   125        - watch
   126    - apiGroups:
   127        - infrastructure.cluster.x-k8s.io
   128      resources:
   129        - ociclusteridentities
   130      verbs:
   131        - get
   132    - apiGroups:
   133        - infrastructure.cluster.x-k8s.io
   134        - controlplane.cluster.x-k8s.io
   135        - bootstrap.cluster.x-k8s.io
   136        - addons.cluster.x-k8s.io
   137      resources:
   138        - ocimanagedmachinepools
   139        - ociclusters
   140        - ocivirtualmachinepools
   141        - ocimanagedclusters
   142        - ocimanagedcontrolplanes
   143        - ocimachinetemplates
   144        - ocimanagedmachinepool
   145        - ocnecontrolplanes
   146        - ocneconfigtemplates
   147        - clusterresourcesets
   148      verbs:
   149        - get
   150        - create
   151        - update
   152    - apiGroups:
   153        - cluster.x-k8s.io
   154      resources:
   155        - clusters
   156        - machinedeployments
   157        - machinepools
   158      verbs:
   159        - create
   160        - update
   161        - get
   162        - list
   163        - watch
   164    - apiGroups:
   165        - apiextensions.k8s.io
   166      resources:
   167        - customresourcedefinitions
   168      verbs:
   169        - get
   170    - apiGroups:
   171        - management.cattle.io
   172      resources:
   173        - clusterroletemplatebindings
   174      verbs:
   175        - create
   176        - update
   177        - get
   178        - list
   179        - watch