mirror of https://git.rancher.io/charts
51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
{{- if and (not .Values.sachet.enabled) (not .Values.prom2teams.enabled) -}}
|
|
{{- fail "At least one Driver must be enabled to install the chart. " }}
|
|
{{- end -}}
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "drivers.fullname" . }}-admin
|
|
labels: {{ include "drivers.labels" . | nindent 4 }}
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
resourceNames: {{ include "drivers.configmapList" . | nindent 6 }}
|
|
verbs:
|
|
- "*"
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "drivers.fullname" . }}-edit
|
|
labels: {{ include "drivers.labels" . | nindent 4 }}
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
resourceNames: {{ include "drivers.configmapList" . | nindent 6 }}
|
|
verbs:
|
|
- "*"
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "drivers.fullname" . }}-view
|
|
labels: {{ include "drivers.labels" . | nindent 4 }}
|
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
resourceNames: {{ include "drivers.configmapList" . | nindent 6 }}
|
|
verbs:
|
|
- 'get'
|
|
- 'list'
|
|
- 'watch'
|