actions/fluxcd-flux2
3
0
Fork 0
mirror of https://github.com/fluxcd/flux2.git synced 2026-02-08 08:47:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #3566 from fluxcd/rbac-edit-view

Browse source 
rbac: Add view and edit aggregated cluster roles
This commit is contained in:
Stefan Prodan 2023-02-17 11:51:39 +02:00 committed by GitHub
commit b445013d25
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
9 changed files with 49 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
manifests/bases/helm-controller/kustomization.yaml
View file

@ -6,7 +6,7 @@ resources:
- account.yaml
transformers:
- labels.yaml
patchesJson6902:
patches:
- target:
group: apps
version: v1

2
manifests/bases/image-automation-controller/kustomization.yaml
View file

@ -6,7 +6,7 @@ resources:
- account.yaml
transformers:
- labels.yaml
patchesJson6902:
patches:
- target:
group: apps
version: v1

2
manifests/bases/image-reflector-controller/kustomization.yaml
View file

@ -6,7 +6,7 @@ resources:
- account.yaml
transformers:
- labels.yaml
patchesJson6902:
patches:
- target:
group: apps
version: v1

2
manifests/bases/kustomize-controller/kustomization.yaml
View file

@ -6,7 +6,7 @@ resources:
- account.yaml
transformers:
- labels.yaml
patchesJson6902:
patches:
- target:
group: apps
version: v1

2
manifests/bases/notification-controller/kustomization.yaml
View file

@ -6,7 +6,7 @@ resources:
- account.yaml
transformers:
- labels.yaml
patchesJson6902:
patches:
- target:
group: apps
version: v1

2
manifests/bases/source-controller/kustomization.yaml
View file

@ -6,7 +6,7 @@ resources:
- account.yaml
transformers:
- labels.yaml
patchesJson6902:
patches:
- target:
group: apps
version: v1

21
manifests/rbac/edit.yaml Normal file
View file

@ -0,0 +1,21 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: flux-edit
labels:
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules:
- apiGroups:
- notification.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- helm.toolkit.fluxcd.io
- image.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
resources: ["*"]
verbs:
- create
- delete
- deletecollection
- patch
- update

2
manifests/rbac/kustomization.yaml
View file

@ -3,3 +3,5 @@ kind: Kustomization
resources:
- controller.yaml
- reconciler.yaml
- edit.yaml
- view.yaml

20
manifests/rbac/view.yaml Normal file
View file

@ -0,0 +1,20 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: flux-view
labels:
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"
rules:
- apiGroups:
- notification.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- helm.toolkit.fluxcd.io
- image.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
resources: ["*"]
verbs:
- get
- list
- watch