mirror of https://git.rancher.io/charts
47 lines
2.7 KiB
YAML
47 lines
2.7 KiB
YAML
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
name: "longhorn-admin"
|
||
|
|
labels:
|
||
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||
|
|
rules:
|
||
|
|
- apiGroups: [ "longhorn.io" ]
|
||
|
|
resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
|
||
|
|
"engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
|
||
|
|
"sharemanagers", "sharemanagers/status", "backingimages", "backingimages/status",
|
||
|
|
"backingimagemanagers", "backingimagemanagers/status", "backingimagedatasources", "backingimagedatasources/status",
|
||
|
|
"backuptargets", "backuptargets/status", "backupvolumes", "backupvolumes/status", "backups", "backups/status",
|
||
|
|
"recurringjobs", "recurringjobs/status", "orphans", "orphans/status", "snapshots", "snapshots/status" ]
|
||
|
|
verbs: [ "*" ]
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
name: "longhorn-edit"
|
||
|
|
labels:
|
||
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
||
|
|
rules:
|
||
|
|
- apiGroups: [ "longhorn.io" ]
|
||
|
|
resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
|
||
|
|
"engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
|
||
|
|
"sharemanagers", "sharemanagers/status", "backingimages", "backingimages/status",
|
||
|
|
"backingimagemanagers", "backingimagemanagers/status", "backingimagedatasources", "backingimagedatasources/status",
|
||
|
|
"backuptargets", "backuptargets/status", "backupvolumes", "backupvolumes/status", "backups", "backups/status",
|
||
|
|
"recurringjobs", "recurringjobs/status", "orphans", "orphans/status", "snapshots", "snapshots/status" ]
|
||
|
|
verbs: [ "*" ]
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
name: "longhorn-view"
|
||
|
|
labels:
|
||
|
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
||
|
|
rules:
|
||
|
|
- apiGroups: [ "longhorn.io" ]
|
||
|
|
resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
|
||
|
|
"engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
|
||
|
|
"sharemanagers", "sharemanagers/status", "backingimages", "backingimages/status",
|
||
|
|
"backingimagemanagers", "backingimagemanagers/status", "backingimagedatasources", "backingimagedatasources/status",
|
||
|
|
"backuptargets", "backuptargets/status", "backupvolumes", "backupvolumes/status", "backups", "backups/status",
|
||
|
|
"recurringjobs", "recurringjobs/status", "orphans", "orphans/status", "snapshots", "snapshots/status" ]
|
||
|
|
verbs: [ "get", "list", "watch" ]
|