github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/opensearch-operator/templates/opensearch-operator-manager-role-cr.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: ClusterRole
     3  metadata:
     4    creationTimestamp: null
     5    name: {{ include "opensearch-operator.fullname" . }}-{{ .Release.Namespace }}-manager-role
     6  rules:
     7  # Pod exec and velero rules are required for Velero Backup and Restore
     8  - apiGroups:
     9    - ""
    10    resources:
    11    - pods/exec
    12    verbs:
    13    - create
    14  - apiGroups:
    15    - velero.io
    16    resources:
    17    - '*'
    18    verbs:
    19    - get
    20    - list
    21    - watch
    22  - apiGroups:
    23    - apps
    24    resources:
    25    - deployments
    26    verbs:
    27    - create
    28    - delete
    29    - get
    30    - list
    31    - patch
    32    - update
    33    - watch
    34  - apiGroups:
    35    - apps
    36    resources:
    37    - statefulsets
    38    - statefulsets/status
    39    - statefulsets/scale
    40    verbs:
    41    - create
    42    - delete
    43    - get
    44    - list
    45    - patch
    46    - update
    47    - watch
    48  - apiGroups:
    49    - batch
    50    resources:
    51    - jobs
    52    verbs:
    53    - create
    54    - delete
    55    - get
    56    - list
    57    - patch
    58    - update
    59    - watch
    60  - apiGroups:
    61    - ""
    62    resources:
    63    - configmaps
    64    verbs:
    65    - create
    66    - delete
    67    - get
    68    - list
    69    - patch
    70    - update
    71    - watch
    72  - apiGroups:
    73    - ""
    74    resources:
    75    - events
    76    verbs:
    77    - create
    78    - patch
    79    - update
    80  - apiGroups:
    81    - ""
    82    resources:
    83    - namespaces
    84    verbs:
    85    - create
    86    - delete
    87    - get
    88    - list
    89    - patch
    90    - update
    91    - watch
    92  - apiGroups:
    93    - ""
    94    resources:
    95    - pods
    96    verbs:
    97    - create
    98    - delete
    99    - get
   100    - list
   101    - patch
   102    - update
   103    - watch
   104  - apiGroups:
   105    - ""
   106    resources:
   107    - secrets
   108    verbs:
   109    - create
   110    - delete
   111    - get
   112    - list
   113    - patch
   114    - update
   115    - watch
   116  - apiGroups:
   117    - ""
   118    resources:
   119    - services
   120    verbs:
   121    - create
   122    - delete
   123    - get
   124    - list
   125    - patch
   126    - update
   127    - watch
   128  - apiGroups:
   129    - "policy"
   130    resources:
   131    - poddisruptionbudgets
   132    verbs:
   133    - create
   134    - delete
   135    - get
   136    - list
   137    - patch
   138    - update
   139    - watch
   140  - apiGroups:
   141    - opensearch.opster.io
   142    resources:
   143    - events
   144    verbs:
   145    - create
   146    - patch
   147  - apiGroups:
   148    - opensearch.opster.io
   149    resources:
   150    - opensearchactiongroups
   151    verbs:
   152    - create
   153    - delete
   154    - get
   155    - list
   156    - patch
   157    - update
   158    - watch
   159  - apiGroups:
   160    - opensearch.opster.io
   161    resources:
   162    - opensearchactiongroups/finalizers
   163    verbs:
   164    - update
   165  - apiGroups:
   166    - opensearch.opster.io
   167    resources:
   168    - opensearchactiongroups/status
   169    verbs:
   170    - get
   171    - patch
   172    - update
   173  - apiGroups:
   174    - opensearch.opster.io
   175    resources:
   176    - opensearchclusters
   177    verbs:
   178    - create
   179    - delete
   180    - get
   181    - list
   182    - patch
   183    - update
   184    - watch
   185  - apiGroups:
   186    - opensearch.opster.io
   187    resources:
   188    - opensearchclusters/finalizers
   189    verbs:
   190    - update
   191  - apiGroups:
   192    - opensearch.opster.io
   193    resources:
   194    - opensearchclusters/status
   195    verbs:
   196    - get
   197    - patch
   198    - update
   199  - apiGroups:
   200    - opensearch.opster.io
   201    resources:
   202    - opensearchroles
   203    verbs:
   204    - create
   205    - delete
   206    - get
   207    - list
   208    - patch
   209    - update
   210    - watch
   211  - apiGroups:
   212    - opensearch.opster.io
   213    resources:
   214    - opensearchroles/finalizers
   215    verbs:
   216    - update
   217  - apiGroups:
   218    - opensearch.opster.io
   219    resources:
   220    - opensearchroles/status
   221    verbs:
   222    - get
   223    - patch
   224    - update
   225  - apiGroups:
   226    - opensearch.opster.io
   227    resources:
   228    - opensearchtenants
   229    verbs:
   230    - create
   231    - delete
   232    - get
   233    - list
   234    - patch
   235    - update
   236    - watch
   237  - apiGroups:
   238    - opensearch.opster.io
   239    resources:
   240    - opensearchtenants/finalizers
   241    verbs:
   242    - update
   243  - apiGroups:
   244    - opensearch.opster.io
   245    resources:
   246    - opensearchtenants/status
   247    verbs:
   248    - get
   249    - patch
   250    - update
   251  - apiGroups:
   252    - opensearch.opster.io
   253    resources:
   254    - opensearchuserrolebindings
   255    verbs:
   256    - create
   257    - delete
   258    - get
   259    - list
   260    - patch
   261    - update
   262    - watch
   263  - apiGroups:
   264    - opensearch.opster.io
   265    resources:
   266    - opensearchuserrolebindings/finalizers
   267    verbs:
   268    - update
   269  - apiGroups:
   270    - opensearch.opster.io
   271    resources:
   272    - opensearchuserrolebindings/status
   273    verbs:
   274    - get
   275    - patch
   276    - update
   277  - apiGroups:
   278    - opensearch.opster.io
   279    resources:
   280    - opensearchusers
   281    verbs:
   282    - create
   283    - delete
   284    - get
   285    - list
   286    - patch
   287    - update
   288    - watch
   289  - apiGroups:
   290    - opensearch.opster.io
   291    resources:
   292    - opensearchusers/finalizers
   293    verbs:
   294    - update
   295  - apiGroups:
   296    - opensearch.opster.io
   297    resources:
   298    - opensearchusers/status
   299    verbs:
   300    - get
   301    - patch
   302    - update
   303  - apiGroups:
   304    - ""
   305    resources:
   306    - persistentvolumeclaims
   307    verbs:
   308    - create
   309    - delete
   310    - get
   311    - list
   312    - patch
   313    - update
   314    - watch
   315  - apiGroups:
   316    - monitoring.coreos.com
   317    resources:
   318    - servicemonitors
   319    verbs:
   320    - create
   321    - delete
   322    - get
   323    - list
   324    - patch
   325    - update
   326    - watch