github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/weblogic-operator/templates/_operator-clusterrole-domain-admin.tpl (about)

     1  # Copyright (c) 2018, 2022, Oracle and/or its affiliates.
     2  # Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl.
     3  
     4  {{- define "operator.operatorClusterRoleDomainAdmin" }}
     5  ---
     6  {{- if (eq .domainNamespaceSelectionStrategy "Dedicated") }}
     7  kind: "Role"
     8  {{- else }}
     9  kind: "ClusterRole"
    10  {{- end }}
    11  apiVersion: "rbac.authorization.k8s.io/v1"
    12  metadata:
    13    {{- if (eq .domainNamespaceSelectionStrategy "Dedicated") }}
    14    name: "weblogic-operator-role-domain-admin"
    15    namespace: {{ .Release.Namespace | quote }}
    16    {{- else }}
    17    name: {{ list .Release.Namespace "weblogic-operator-clusterrole-domain-admin" | join "-" | quote }}
    18    {{- end }}
    19    labels:
    20      weblogic.operatorName: {{ .Release.Namespace | quote }}
    21  rules:
    22  - apiGroups: [""]
    23    resources: ["configmaps"]
    24    verbs: ["get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"]
    25  - apiGroups: [""]
    26    resources: ["secrets", "pods", "events"]
    27    verbs: ["get", "list", "watch"]
    28  - apiGroups: [""]
    29    resources: ["pods/log"]
    30    verbs: ["get", "list"]
    31  - apiGroups: [""]
    32    resources: ["pods/exec"]
    33    verbs: ["get", "create"]
    34  - apiGroups: ["weblogic.oracle"]
    35    resources: ["domains", "clusters"]
    36    verbs: ["get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"]
    37  - apiGroups: ["weblogic.oracle"]
    38    resources: ["domains/status", "clusters/status"]
    39    verbs: ["get", "watch"]
    40  {{- end }}