github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/kiali-server/templates/role.yaml (about) 1 --- 2 apiVersion: rbac.authorization.k8s.io/v1 3 kind: ClusterRole 4 metadata: 5 name: {{ include "kiali-server.fullname" . }} 6 labels: 7 {{- include "kiali-server.labels" . | nindent 4 }} 8 rules: 9 - apiGroups: [""] 10 resources: 11 - configmaps 12 - endpoints 13 {{- if not (has "logs-tab" .Values.kiali_feature_flags.disabled_features) }} 14 - pods/log 15 {{- end }} 16 verbs: 17 - get 18 - list 19 - watch 20 - apiGroups: [""] 21 resources: 22 - namespaces 23 - pods 24 - replicationcontrollers 25 - services 26 verbs: 27 - get 28 - list 29 - watch 30 - patch 31 - apiGroups: [""] 32 resources: 33 - pods/portforward 34 verbs: 35 - create 36 - post 37 - apiGroups: ["extensions", "apps"] 38 resources: 39 - daemonsets 40 - deployments 41 - replicasets 42 - statefulsets 43 verbs: 44 - get 45 - list 46 - watch 47 - patch 48 - apiGroups: ["batch"] 49 resources: 50 - cronjobs 51 - jobs 52 verbs: 53 - get 54 - list 55 - watch 56 - patch 57 - apiGroups: 58 - networking.istio.io 59 - security.istio.io 60 - extensions.istio.io 61 - telemetry.istio.io 62 - gateway.networking.k8s.io 63 resources: ["*"] 64 verbs: 65 - get 66 - list 67 - watch 68 - create 69 - delete 70 - patch 71 - apiGroups: ["apps.openshift.io"] 72 resources: 73 - deploymentconfigs 74 verbs: 75 - get 76 - list 77 - watch 78 - patch 79 - apiGroups: ["project.openshift.io"] 80 resources: 81 - projects 82 verbs: 83 - get 84 - apiGroups: ["route.openshift.io"] 85 resources: 86 - routes 87 verbs: 88 - get 89 - apiGroups: ["authentication.k8s.io"] 90 resources: 91 - tokenreviews 92 verbs: 93 - create 94 ...