sigs.k8s.io/kubebuilder/v3@v3.14.0/pkg/plugins/common/kustomize/v2/scaffolds/internal/templates/config/rbac/role.go (about)

     1  /*
     2  Copyright 2023 The Kubernetes Authors.
     3  
     4  Licensed under the Apache License, Version 2.0 (the "License");
     5  you may not use this file except in compliance with the License.
     6  You may obtain a copy of the License at
     7  
     8      http://www.apache.org/licenses/LICENSE-2.0
     9  
    10  Unless required by applicable law or agreed to in writing, software
    11  distributed under the License is distributed on an "AS IS" BASIS,
    12  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    13  See the License for the specific language governing permissions and
    14  limitations under the License.
    15  */
    16  
    17  package rbac
    18  
    19  import (
    20  	"path/filepath"
    21  
    22  	"sigs.k8s.io/kubebuilder/v3/pkg/machinery"
    23  )
    24  
    25  var _ machinery.Template = &Role{}
    26  
    27  // Role scaffolds a file that defines the role for the manager
    28  type Role struct {
    29  	machinery.TemplateMixin
    30  	machinery.ProjectNameMixin
    31  }
    32  
    33  // SetTemplateDefaults implements file.Template
    34  func (f *Role) SetTemplateDefaults() error {
    35  	if f.Path == "" {
    36  		f.Path = filepath.Join("config", "rbac", "role.yaml")
    37  	}
    38  
    39  	f.TemplateBody = managerRoleTemplate
    40  
    41  	f.IfExistsAction = machinery.SkipFile
    42  
    43  	return nil
    44  }
    45  
    46  const managerRoleTemplate = `apiVersion: rbac.authorization.k8s.io/v1
    47  kind: ClusterRole
    48  metadata:
    49    labels:
    50      app.kubernetes.io/name: clusterrole
    51      app.kubernetes.io/instance: manager-role
    52      app.kubernetes.io/component: rbac
    53      app.kubernetes.io/created-by: {{ .ProjectName }}
    54      app.kubernetes.io/part-of: {{ .ProjectName }}
    55      app.kubernetes.io/managed-by: kustomize
    56    name: manager-role
    57  rules:
    58  - apiGroups: [""]
    59    resources: ["pods"]
    60    verbs: ["get", "list", "watch"]
    61  `