github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/jaegertracing/jaeger-operator/templates/role.yaml (about)

     1  {{- if .Values.rbac.create }}
     2  kind: {{ if .Values.rbac.clusterRole }}Cluster{{ end }}Role
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  metadata:
     5    name: {{ include "jaeger-operator.fullname" . }}
     6    namespace: {{ .Release.Namespace }}
     7    labels:
     8  {{ include "jaeger-operator.labels" . | indent 4 }}
     9  rules:
    10  - apiGroups:
    11    - apps
    12    resources:
    13    - daemonsets
    14    - deployments
    15    - replicasets
    16    - statefulsets
    17    verbs:
    18    - create
    19    - delete
    20    - get
    21    - list
    22    - patch
    23    - update
    24    - watch
    25  - apiGroups:
    26    - apps
    27    resources:
    28    - deployments
    29    verbs:
    30    - create
    31    - delete
    32    - get
    33    - list
    34    - patch
    35    - update
    36    - watch
    37  - apiGroups:
    38    - apps
    39    resources:
    40    - deployments/status
    41    verbs:
    42    - get
    43    - patch
    44    - update
    45  - apiGroups:
    46    - autoscaling
    47    resources:
    48    - horizontalpodautoscalers
    49    verbs:
    50    - create
    51    - delete
    52    - get
    53    - list
    54    - patch
    55    - update
    56    - watch
    57  - apiGroups:
    58    - batch
    59    resources:
    60    - cronjobs
    61    - jobs
    62    verbs:
    63    - create
    64    - delete
    65    - get
    66    - list
    67    - patch
    68    - update
    69    - watch
    70  - apiGroups:
    71    - console.openshift.io
    72    resources:
    73    - consolelinks
    74    verbs:
    75    - create
    76    - delete
    77    - get
    78    - list
    79    - patch
    80    - update
    81    - watch
    82  - apiGroups:
    83    - coordination.k8s.io
    84    resources:
    85    - leases
    86    verbs:
    87    - create
    88    - get
    89    - list
    90    - update
    91  - apiGroups:
    92    - ""
    93    resources:
    94    - configmaps
    95    - persistentvolumeclaims
    96    - pods
    97    - secrets
    98    - serviceaccounts
    99    - services
   100    - services/finalizers
   101    verbs:
   102    - create
   103    - delete
   104    - get
   105    - list
   106    - patch
   107    - update
   108    - watch
   109  - apiGroups:
   110    - ""
   111    resources:
   112    - namespaces
   113    verbs:
   114    - create
   115    - delete
   116    - get
   117    - list
   118    - patch
   119    - update
   120    - watch
   121  - apiGroups:
   122    - ""
   123    resources:
   124    - namespaces/status
   125    verbs:
   126    - get
   127    - patch
   128    - update
   129  - apiGroups:
   130    - extensions
   131    resources:
   132    - ingresses
   133    verbs:
   134    - create
   135    - delete
   136    - get
   137    - list
   138    - patch
   139    - update
   140    - watch
   141  - apiGroups:
   142    - image.openshift.io
   143    resources:
   144    - imagestreams
   145    verbs:
   146    - get
   147    - list
   148    - watch
   149  - apiGroups:
   150    - jaegertracing.io
   151    resources:
   152    - jaegers
   153    verbs:
   154    - create
   155    - delete
   156    - get
   157    - list
   158    - patch
   159    - update
   160    - watch
   161  - apiGroups:
   162    - jaegertracing.io
   163    resources:
   164    - jaegers/finalizers
   165    verbs:
   166    - update
   167  - apiGroups:
   168    - jaegertracing.io
   169    resources:
   170    - jaegers/status
   171    verbs:
   172    - get
   173    - patch
   174    - update
   175  - apiGroups:
   176    - kafka.strimzi.io
   177    resources:
   178    - kafkas
   179    - kafkausers
   180    verbs:
   181    - create
   182    - delete
   183    - get
   184    - list
   185    - patch
   186    - update
   187    - watch
   188  - apiGroups:
   189    - logging.openshift.io
   190    resources:
   191    - elasticsearch
   192    verbs:
   193    - create
   194    - delete
   195    - get
   196    - list
   197    - patch
   198    - update
   199    - watch
   200  - apiGroups:
   201    - logging.openshift.io
   202    resources:
   203    - elasticsearches
   204    verbs:
   205    - create
   206    - delete
   207    - get
   208    - list
   209    - patch
   210    - update
   211    - watch
   212  - apiGroups:
   213    - monitoring.coreos.com
   214    resources:
   215    - servicemonitors
   216    verbs:
   217    - create
   218    - delete
   219    - get
   220    - list
   221    - patch
   222    - update
   223    - watch
   224  - apiGroups:
   225    - networking.k8s.io
   226    resources:
   227    - ingresses
   228    verbs:
   229    - create
   230    - delete
   231    - get
   232    - list
   233    - patch
   234    - update
   235    - watch
   236  - apiGroups:
   237    - rbac.authorization.k8s.io
   238    resources:
   239    - clusterrolebindings
   240    verbs:
   241    - create
   242    - delete
   243    - get
   244    - list
   245    - patch
   246    - update
   247    - watch
   248  - apiGroups:
   249    - route.openshift.io
   250    resources:
   251    - routes
   252    verbs:
   253    - create
   254    - delete
   255    - get
   256    - list
   257    - patch
   258    - update
   259    - watch
   260  {{- if .Values.rbac.pspEnabled }}
   261  - apiGroups: ['policy']
   262    resources: ['podsecuritypolicies']
   263    verbs:     ['use']
   264    resourceNames:
   265    - {{ include "jaeger-operator.fullname" . }}-operator-psp
   266  {{- end }}
   267  {{- end }}