sigs.k8s.io/cluster-api-provider-azure@v1.17.0/config/rbac/role.yaml (about)

     1  ---
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name: base-manager-role
     6  rules:
     7  - apiGroups:
     8    - ""
     9    resources:
    10    - events
    11    verbs:
    12    - create
    13    - get
    14    - list
    15    - patch
    16    - update
    17    - watch
    18  - apiGroups:
    19    - ""
    20    resources:
    21    - namespaces
    22    verbs:
    23    - list
    24  - apiGroups:
    25    - ""
    26    resources:
    27    - secrets
    28    verbs:
    29    - create
    30    - delete
    31    - get
    32    - list
    33    - patch
    34    - update
    35    - watch
    36  - apiGroups:
    37    - authentication.k8s.io
    38    resources:
    39    - tokenreviews
    40    verbs:
    41    - create
    42  - apiGroups:
    43    - authorization.k8s.io
    44    resources:
    45    - subjectaccessreviews
    46    verbs:
    47    - create
    48  - apiGroups:
    49    - bootstrap.cluster.x-k8s.io
    50    resources:
    51    - kubeadmconfigs
    52    - kubeadmconfigs/status
    53    verbs:
    54    - get
    55    - list
    56    - watch
    57  - apiGroups:
    58    - cluster.x-k8s.io
    59    resources:
    60    - clusters
    61    verbs:
    62    - create
    63  - apiGroups:
    64    - cluster.x-k8s.io
    65    resources:
    66    - clusters
    67    - clusters/status
    68    verbs:
    69    - get
    70    - list
    71    - patch
    72    - watch
    73  - apiGroups:
    74    - cluster.x-k8s.io
    75    resources:
    76    - machinepools
    77    verbs:
    78    - create
    79  - apiGroups:
    80    - cluster.x-k8s.io
    81    resources:
    82    - machinepools
    83    - machinepools/status
    84    verbs:
    85    - get
    86    - list
    87    - patch
    88    - update
    89    - watch
    90  - apiGroups:
    91    - cluster.x-k8s.io
    92    resources:
    93    - machines
    94    - machines/status
    95    verbs:
    96    - delete
    97    - get
    98    - list
    99    - watch
   100  - apiGroups:
   101    - containerservice.azure.com
   102    resources:
   103    - fleetsmembers
   104    verbs:
   105    - create
   106    - delete
   107    - get
   108    - list
   109    - patch
   110    - update
   111    - watch
   112  - apiGroups:
   113    - containerservice.azure.com
   114    resources:
   115    - fleetsmembers/status
   116    verbs:
   117    - get
   118    - list
   119    - watch
   120  - apiGroups:
   121    - containerservice.azure.com
   122    resources:
   123    - managedclusters
   124    verbs:
   125    - create
   126    - delete
   127    - get
   128    - list
   129    - patch
   130    - update
   131    - watch
   132  - apiGroups:
   133    - containerservice.azure.com
   134    resources:
   135    - managedclusters/status
   136    verbs:
   137    - get
   138    - list
   139    - watch
   140  - apiGroups:
   141    - containerservice.azure.com
   142    resources:
   143    - managedclustersagentpools
   144    verbs:
   145    - create
   146    - delete
   147    - get
   148    - list
   149    - patch
   150    - update
   151    - watch
   152  - apiGroups:
   153    - containerservice.azure.com
   154    resources:
   155    - managedclustersagentpools/status
   156    verbs:
   157    - get
   158    - list
   159    - watch
   160  - apiGroups:
   161    - ""
   162    resources:
   163    - nodes
   164    verbs:
   165    - get
   166    - list
   167    - watch
   168  - apiGroups:
   169    - infrastructure.cluster.x-k8s.io
   170    resources:
   171    - azureasomanagedclusters
   172    verbs:
   173    - create
   174    - delete
   175    - get
   176    - list
   177    - patch
   178    - update
   179    - watch
   180  - apiGroups:
   181    - infrastructure.cluster.x-k8s.io
   182    resources:
   183    - azureasomanagedclusters/finalizers
   184    verbs:
   185    - update
   186  - apiGroups:
   187    - infrastructure.cluster.x-k8s.io
   188    resources:
   189    - azureasomanagedclusters/status
   190    verbs:
   191    - get
   192    - patch
   193    - update
   194  - apiGroups:
   195    - infrastructure.cluster.x-k8s.io
   196    resources:
   197    - azureasomanagedcontrolplanes
   198    verbs:
   199    - create
   200    - delete
   201    - get
   202    - list
   203    - patch
   204    - update
   205    - watch
   206  - apiGroups:
   207    - infrastructure.cluster.x-k8s.io
   208    resources:
   209    - azureasomanagedcontrolplanes/finalizers
   210    verbs:
   211    - update
   212  - apiGroups:
   213    - infrastructure.cluster.x-k8s.io
   214    resources:
   215    - azureasomanagedcontrolplanes/status
   216    verbs:
   217    - get
   218    - patch
   219    - update
   220  - apiGroups:
   221    - infrastructure.cluster.x-k8s.io
   222    resources:
   223    - azureasomanagedmachinepools
   224    verbs:
   225    - create
   226    - delete
   227    - get
   228    - list
   229    - patch
   230    - update
   231    - watch
   232  - apiGroups:
   233    - infrastructure.cluster.x-k8s.io
   234    resources:
   235    - azureasomanagedmachinepools/finalizers
   236    verbs:
   237    - update
   238  - apiGroups:
   239    - infrastructure.cluster.x-k8s.io
   240    resources:
   241    - azureasomanagedmachinepools/status
   242    verbs:
   243    - get
   244    - patch
   245    - update
   246  - apiGroups:
   247    - infrastructure.cluster.x-k8s.io
   248    resources:
   249    - azureclusteridentities
   250    - azureclusteridentities/status
   251    verbs:
   252    - create
   253    - delete
   254    - get
   255    - list
   256    - patch
   257    - update
   258    - watch
   259  - apiGroups:
   260    - infrastructure.cluster.x-k8s.io
   261    resources:
   262    - azureclusters
   263    verbs:
   264    - create
   265    - delete
   266    - get
   267    - list
   268    - patch
   269    - update
   270    - watch
   271  - apiGroups:
   272    - infrastructure.cluster.x-k8s.io
   273    resources:
   274    - azureclusters/status
   275    verbs:
   276    - get
   277    - patch
   278    - update
   279  - apiGroups:
   280    - infrastructure.cluster.x-k8s.io
   281    resources:
   282    - azuremachinepoolmachines
   283    verbs:
   284    - create
   285    - delete
   286    - get
   287    - list
   288    - patch
   289    - update
   290    - watch
   291  - apiGroups:
   292    - infrastructure.cluster.x-k8s.io
   293    resources:
   294    - azuremachinepoolmachines/status
   295    verbs:
   296    - get
   297    - patch
   298    - update
   299  - apiGroups:
   300    - infrastructure.cluster.x-k8s.io
   301    resources:
   302    - azuremachinepools
   303    verbs:
   304    - create
   305    - delete
   306    - get
   307    - list
   308    - patch
   309    - update
   310    - watch
   311  - apiGroups:
   312    - infrastructure.cluster.x-k8s.io
   313    resources:
   314    - azuremachinepools/status
   315    verbs:
   316    - get
   317    - patch
   318    - update
   319  - apiGroups:
   320    - infrastructure.cluster.x-k8s.io
   321    resources:
   322    - azuremachines
   323    verbs:
   324    - create
   325    - delete
   326    - get
   327    - list
   328    - patch
   329    - update
   330    - watch
   331  - apiGroups:
   332    - infrastructure.cluster.x-k8s.io
   333    resources:
   334    - azuremachines/status
   335    verbs:
   336    - get
   337    - patch
   338    - update
   339  - apiGroups:
   340    - infrastructure.cluster.x-k8s.io
   341    resources:
   342    - azuremachinetemplates
   343    - azuremachinetemplates/status
   344    verbs:
   345    - get
   346    - list
   347    - watch
   348  - apiGroups:
   349    - infrastructure.cluster.x-k8s.io
   350    resources:
   351    - azuremanagedclusters
   352    verbs:
   353    - create
   354    - delete
   355    - get
   356    - list
   357    - patch
   358    - update
   359    - watch
   360  - apiGroups:
   361    - infrastructure.cluster.x-k8s.io
   362    resources:
   363    - azuremanagedclusters/status
   364    verbs:
   365    - get
   366    - patch
   367    - update
   368  - apiGroups:
   369    - infrastructure.cluster.x-k8s.io
   370    resources:
   371    - azuremanagedcontrolplanes
   372    verbs:
   373    - create
   374    - delete
   375    - get
   376    - list
   377    - patch
   378    - update
   379    - watch
   380  - apiGroups:
   381    - infrastructure.cluster.x-k8s.io
   382    resources:
   383    - azuremanagedcontrolplanes/status
   384    verbs:
   385    - get
   386    - patch
   387    - update
   388  - apiGroups:
   389    - infrastructure.cluster.x-k8s.io
   390    resources:
   391    - azuremanagedmachinepools
   392    verbs:
   393    - create
   394    - delete
   395    - get
   396    - list
   397    - patch
   398    - update
   399    - watch
   400  - apiGroups:
   401    - infrastructure.cluster.x-k8s.io
   402    resources:
   403    - azuremanagedmachinepools/status
   404    verbs:
   405    - get
   406    - patch
   407    - update
   408  - apiGroups:
   409    - kubernetesconfiguration.azure.com
   410    resources:
   411    - extensions
   412    verbs:
   413    - create
   414    - delete
   415    - get
   416    - list
   417    - patch
   418    - update
   419    - watch
   420  - apiGroups:
   421    - kubernetesconfiguration.azure.com
   422    resources:
   423    - extensions/status
   424    verbs:
   425    - get
   426    - list
   427    - watch
   428  - apiGroups:
   429    - network.azure.com
   430    resources:
   431    - bastionhosts
   432    - natgateways
   433    - privateendpoints
   434    - virtualnetworks
   435    - virtualnetworkssubnets
   436    verbs:
   437    - create
   438    - delete
   439    - get
   440    - list
   441    - patch
   442    - update
   443    - watch
   444  - apiGroups:
   445    - network.azure.com
   446    resources:
   447    - bastionhosts/status
   448    - natgateways/status
   449    - privateendpoints/status
   450    - virtualnetworks/status
   451    - virtualnetworkssubnets/status
   452    verbs:
   453    - get
   454    - list
   455    - watch
   456  - apiGroups:
   457    - network.azure.com
   458    resources:
   459    - privateendpoints
   460    - virtualnetworks
   461    - virtualnetworkssubnets
   462    verbs:
   463    - create
   464    - delete
   465    - get
   466    - list
   467    - patch
   468    - update
   469    - watch
   470  - apiGroups:
   471    - network.azure.com
   472    resources:
   473    - privateendpoints/status
   474    - virtualnetworks/status
   475    - virtualnetworkssubnets/status
   476    verbs:
   477    - get
   478    - list
   479    - watch
   480  - apiGroups:
   481    - resources.azure.com
   482    resources:
   483    - resourcegroups
   484    verbs:
   485    - create
   486    - delete
   487    - get
   488    - list
   489    - patch
   490    - update
   491    - watch
   492  - apiGroups:
   493    - resources.azure.com
   494    resources:
   495    - resourcegroups/status
   496    verbs:
   497    - get
   498    - list
   499    - watch