fluxcd-flux2/manifests
Max Jonas Werner a21fd5a0e3
feat: create view/edit ClusterRoles upon install
This way users can make use of these roles by having them
aggregated into the 'view', 'admin' and 'edit' ClusterRoles
present on Kubernetes clusters by default.

Without these roles you would have to bind subjects in a confined
Namespace to the `cluster-admin` ClusterRole which lets them create
cluster-scoped resources. To really confine subjects to a single
Namespace you would rather want to bind them to the `admin` or `edit`
ClusterRole so that they cannot create cluster-scoped resources. This
is where these new ClusterRoles created in this commit come into play,
letting subjects bound to one of these two ClusterRoles created Flux
CRDs such as HelmRelease or Kustomization.

Signed-off-by: Max Jonas Werner <mail@makk.es>
2021-10-14 15:59:53 +02:00
..
bases Update toolkit components 2021-10-13 11:16:40 +00:00
crds Update toolkit components 2021-10-13 11:16:40 +00:00
install Add part-of label to the static manifests 2021-10-14 15:40:36 +03:00
integrations Avoid substitution issue in kustomize credentials sync 2021-10-13 11:50:16 +01:00
monitoring Update podmonitor.yaml 2021-07-01 17:27:54 +02:00
policies Keep policy order as defined 2021-04-19 13:21:32 -07:00
rbac feat: create view/edit ClusterRoles upon install 2021-10-14 15:59:53 +02:00
scripts Make manifests dir bundle.sh configurable 2021-03-08 18:45:05 +01:00