github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/kiali-server/templates/role-viewer.yaml (about)

     1  ---
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name: {{ include "kiali-server.fullname" . }}-viewer
     6    labels:
     7      {{- include "kiali-server.labels" . | nindent 4 }}
     8  rules:
     9  - apiGroups: [""]
    10    resources:
    11    - configmaps
    12    - endpoints
    13  {{- if not (has "logs-tab" .Values.kiali_feature_flags.disabled_features) }}
    14    - pods/log
    15  {{- end }}
    16    verbs:
    17    - get
    18    - list
    19    - watch
    20  - apiGroups: [""]
    21    resources:
    22    - namespaces
    23    - pods
    24    - replicationcontrollers
    25    - services
    26    verbs:
    27    - get
    28    - list
    29    - watch
    30  - apiGroups: [""]
    31    resources:
    32    - pods/portforward
    33    verbs:
    34    - create
    35    - post
    36  - apiGroups: ["extensions", "apps"]
    37    resources:
    38    - daemonsets
    39    - deployments
    40    - replicasets
    41    - statefulsets
    42    verbs:
    43    - get
    44    - list
    45    - watch
    46  - apiGroups: ["batch"]
    47    resources:
    48    - cronjobs
    49    - jobs
    50    verbs:
    51    - get
    52    - list
    53    - watch
    54  - apiGroups:
    55    - networking.istio.io
    56    - security.istio.io
    57    - extensions.istio.io
    58    - telemetry.istio.io
    59    - gateway.networking.k8s.io
    60    resources: ["*"]
    61    verbs:
    62    - get
    63    - list
    64    - watch
    65  - apiGroups: ["apps.openshift.io"]
    66    resources:
    67    - deploymentconfigs
    68    verbs:
    69    - get
    70    - list
    71    - watch
    72  - apiGroups: ["project.openshift.io"]
    73    resources:
    74    - projects
    75    verbs:
    76    - get
    77  - apiGroups: ["route.openshift.io"]
    78    resources:
    79    - routes
    80    verbs:
    81    - get
    82  - apiGroups: ["authentication.k8s.io"]
    83    resources:
    84    - tokenreviews
    85    verbs:
    86    - create
    87  ...