github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/opensearch-operator/templates/opensearch-operator-manager-role-cr.yaml (about) 1 apiVersion: rbac.authorization.k8s.io/v1 2 kind: ClusterRole 3 metadata: 4 creationTimestamp: null 5 name: {{ include "opensearch-operator.fullname" . }}-{{ .Release.Namespace }}-manager-role 6 rules: 7 # Pod exec and velero rules are required for Velero Backup and Restore 8 - apiGroups: 9 - "" 10 resources: 11 - pods/exec 12 verbs: 13 - create 14 - apiGroups: 15 - velero.io 16 resources: 17 - '*' 18 verbs: 19 - get 20 - list 21 - watch 22 - apiGroups: 23 - apps 24 resources: 25 - deployments 26 verbs: 27 - create 28 - delete 29 - get 30 - list 31 - patch 32 - update 33 - watch 34 - apiGroups: 35 - apps 36 resources: 37 - statefulsets 38 - statefulsets/status 39 - statefulsets/scale 40 verbs: 41 - create 42 - delete 43 - get 44 - list 45 - patch 46 - update 47 - watch 48 - apiGroups: 49 - batch 50 resources: 51 - jobs 52 verbs: 53 - create 54 - delete 55 - get 56 - list 57 - patch 58 - update 59 - watch 60 - apiGroups: 61 - "" 62 resources: 63 - configmaps 64 verbs: 65 - create 66 - delete 67 - get 68 - list 69 - patch 70 - update 71 - watch 72 - apiGroups: 73 - "" 74 resources: 75 - events 76 verbs: 77 - create 78 - patch 79 - update 80 - apiGroups: 81 - "" 82 resources: 83 - namespaces 84 verbs: 85 - create 86 - delete 87 - get 88 - list 89 - patch 90 - update 91 - watch 92 - apiGroups: 93 - "" 94 resources: 95 - pods 96 verbs: 97 - create 98 - delete 99 - get 100 - list 101 - patch 102 - update 103 - watch 104 - apiGroups: 105 - "" 106 resources: 107 - secrets 108 verbs: 109 - create 110 - delete 111 - get 112 - list 113 - patch 114 - update 115 - watch 116 - apiGroups: 117 - "" 118 resources: 119 - services 120 verbs: 121 - create 122 - delete 123 - get 124 - list 125 - patch 126 - update 127 - watch 128 - apiGroups: 129 - "policy" 130 resources: 131 - poddisruptionbudgets 132 verbs: 133 - create 134 - delete 135 - get 136 - list 137 - patch 138 - update 139 - watch 140 - apiGroups: 141 - opensearch.opster.io 142 resources: 143 - events 144 verbs: 145 - create 146 - patch 147 - apiGroups: 148 - opensearch.opster.io 149 resources: 150 - opensearchactiongroups 151 verbs: 152 - create 153 - delete 154 - get 155 - list 156 - patch 157 - update 158 - watch 159 - apiGroups: 160 - opensearch.opster.io 161 resources: 162 - opensearchactiongroups/finalizers 163 verbs: 164 - update 165 - apiGroups: 166 - opensearch.opster.io 167 resources: 168 - opensearchactiongroups/status 169 verbs: 170 - get 171 - patch 172 - update 173 - apiGroups: 174 - opensearch.opster.io 175 resources: 176 - opensearchclusters 177 verbs: 178 - create 179 - delete 180 - get 181 - list 182 - patch 183 - update 184 - watch 185 - apiGroups: 186 - opensearch.opster.io 187 resources: 188 - opensearchclusters/finalizers 189 verbs: 190 - update 191 - apiGroups: 192 - opensearch.opster.io 193 resources: 194 - opensearchclusters/status 195 verbs: 196 - get 197 - patch 198 - update 199 - apiGroups: 200 - opensearch.opster.io 201 resources: 202 - opensearchroles 203 verbs: 204 - create 205 - delete 206 - get 207 - list 208 - patch 209 - update 210 - watch 211 - apiGroups: 212 - opensearch.opster.io 213 resources: 214 - opensearchroles/finalizers 215 verbs: 216 - update 217 - apiGroups: 218 - opensearch.opster.io 219 resources: 220 - opensearchroles/status 221 verbs: 222 - get 223 - patch 224 - update 225 - apiGroups: 226 - opensearch.opster.io 227 resources: 228 - opensearchtenants 229 verbs: 230 - create 231 - delete 232 - get 233 - list 234 - patch 235 - update 236 - watch 237 - apiGroups: 238 - opensearch.opster.io 239 resources: 240 - opensearchtenants/finalizers 241 verbs: 242 - update 243 - apiGroups: 244 - opensearch.opster.io 245 resources: 246 - opensearchtenants/status 247 verbs: 248 - get 249 - patch 250 - update 251 - apiGroups: 252 - opensearch.opster.io 253 resources: 254 - opensearchuserrolebindings 255 verbs: 256 - create 257 - delete 258 - get 259 - list 260 - patch 261 - update 262 - watch 263 - apiGroups: 264 - opensearch.opster.io 265 resources: 266 - opensearchuserrolebindings/finalizers 267 verbs: 268 - update 269 - apiGroups: 270 - opensearch.opster.io 271 resources: 272 - opensearchuserrolebindings/status 273 verbs: 274 - get 275 - patch 276 - update 277 - apiGroups: 278 - opensearch.opster.io 279 resources: 280 - opensearchusers 281 verbs: 282 - create 283 - delete 284 - get 285 - list 286 - patch 287 - update 288 - watch 289 - apiGroups: 290 - opensearch.opster.io 291 resources: 292 - opensearchusers/finalizers 293 verbs: 294 - update 295 - apiGroups: 296 - opensearch.opster.io 297 resources: 298 - opensearchusers/status 299 verbs: 300 - get 301 - patch 302 - update 303 - apiGroups: 304 - "" 305 resources: 306 - persistentvolumeclaims 307 verbs: 308 - create 309 - delete 310 - get 311 - list 312 - patch 313 - update 314 - watch 315 - apiGroups: 316 - monitoring.coreos.com 317 resources: 318 - servicemonitors 319 verbs: 320 - create 321 - delete 322 - get 323 - list 324 - patch 325 - update 326 - watch