github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/weblogic-operator/templates/_operator-clusterrole-namespace.tpl (about)

     1  # Copyright (c) 2018, 2023, Oracle and/or its affiliates.
     2  # Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl.
     3  
     4  {{- define "operator.operatorClusterRoleNamespace" }}
     5  ---
     6  {{- if (eq .domainNamespaceSelectionStrategy "Dedicated") }}
     7  kind: "Role"
     8  {{- else }}
     9  kind: "ClusterRole"
    10  {{- end }}
    11  apiVersion: "rbac.authorization.k8s.io/v1"
    12  metadata:
    13    {{- if (eq .domainNamespaceSelectionStrategy "Dedicated") }}
    14    name: "weblogic-operator-role-namespace"
    15    namespace: {{ .Release.Namespace | quote }}
    16    {{- else }}
    17    name: {{ list .Release.Namespace "weblogic-operator-clusterrole-namespace" | join "-" | quote }}
    18    {{- end }}
    19    labels:
    20      weblogic.operatorName: {{ .Release.Namespace | quote }}
    21  rules:
    22  - apiGroups: [""]
    23    resources: ["services", "configmaps", "pods", "events"]
    24    verbs: ["get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"]
    25  - apiGroups: [""]
    26    resources: ["secrets"]
    27    verbs: ["get", "list", "watch"]
    28  - apiGroups: [""]
    29    resources: ["persistentvolumeclaims"]
    30    verbs: ["get", "list", "create"]
    31  - apiGroups: [""]
    32    resources: ["pods/log"]
    33    verbs: ["get", "list"]
    34  - apiGroups: [""]
    35    resources: ["pods/exec"]
    36    verbs: ["get", "create"]
    37  - apiGroups: ["batch"]
    38    resources: ["jobs"]
    39    verbs: ["get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"]
    40  - apiGroups: ["policy"]
    41    resources: ["poddisruptionbudgets"]
    42    verbs: ["get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"]
    43  {{- end }}