rbac.yaml (1380B)
1 apiVersion: v1 2 kind: ServiceAccount 3 metadata: 4 name: gerrit-operator 5 namespace: gerrit 6 --- 7 apiVersion: rbac.authorization.k8s.io/v1 8 kind: ClusterRoleBinding 9 metadata: 10 name: gerrit-operator-admin 11 subjects: 12 - kind: ServiceAccount 13 name: gerrit-operator 14 namespace: gerrit 15 roleRef: 16 kind: ClusterRole 17 name: gerrit-operator 18 apiGroup: "" 19 --- 20 apiVersion: rbac.authorization.k8s.io/v1 21 kind: ClusterRole 22 metadata: 23 name: gerrit-operator 24 rules: 25 - apiGroups: 26 - "batch" 27 resources: 28 - cronjobs 29 - jobs 30 verbs: 31 - "*" 32 - apiGroups: 33 - "apps" 34 resources: 35 - statefulsets 36 - deployments 37 verbs: 38 - "*" 39 - apiGroups: 40 - "" 41 resources: 42 - configmaps 43 - persistentvolumeclaims 44 - secrets 45 - services 46 verbs: 47 - "*" 48 - apiGroups: 49 - "storage.k8s.io" 50 resources: 51 - storageclasses 52 verbs: 53 - "get" 54 - "list" 55 - apiGroups: 56 - "apiextensions.k8s.io" 57 resources: 58 - customresourcedefinitions 59 verbs: 60 - "*" 61 - apiGroups: 62 - "gerritoperator.google.com" 63 resources: 64 - "*" 65 verbs: 66 - "*" 67 - apiGroups: 68 - "admissionregistration.k8s.io" 69 resources: 70 - "validatingwebhookconfigurations" 71 verbs: 72 - "*" 73 - apiGroups: 74 - "networking.k8s.io" 75 resources: 76 - ingresses 77 verbs: 78 - "*"