rancher-charts/packages/rancher-sriov/generated-changes/patch/templates/clusterrole.yaml.patch

58 lines
1.3 KiB
Diff
Raw Normal View History

--- charts-original/templates/clusterrole.yaml
+++ charts/templates/clusterrole.yaml
@@ -58,3 +58,54 @@
- apiGroups: [ "config.openshift.io" ]
resources: [ "infrastructures" ]
verbs: [ "get", "list", "watch" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: sriov-admin
+ {{- if .Values.global.rbac.userRoles.aggregateToDefaultRoles }}
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+ {{- end }}
+rules:
+- apiGroups:
+ - sriovnetwork.openshift.io
+ resources:
+ - '*'
+ verbs:
+ - "get"
+ - "watch"
+ - "list"
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: sriov-edit
+ {{- if .Values.global.rbac.userRoles.aggregateToDefaultRoles }}
+ rbac.authorization.k8s.io/aggregate-to-edit: "true"
+ {{- end }}
+rules:
+- apiGroups:
+ - sriovnetwork.openshift.io
+ resources:
+ - '*'
+ verbs:
+ - "get"
+ - "watch"
+ - "list"
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: sriov-view
+ {{- if .Values.global.rbac.userRoles.aggregateToDefaultRoles }}
+ rbac.authorization.k8s.io/aggregate-to-view: "true"
+ {{- end }}
+rules:
+- apiGroups:
+ - sriovnetwork.openshift.io
+ resources:
+ - '*'
+ verbs:
+ - "get"
+ - "watch"
+ - "list"