cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

rbac.yaml (1380B)


      1 apiVersion: v1
      2 kind: ServiceAccount
      3 metadata:
      4   name: gerrit-operator
      5   namespace: gerrit
      6 ---
      7 apiVersion: rbac.authorization.k8s.io/v1
      8 kind: ClusterRoleBinding
      9 metadata:
     10   name: gerrit-operator-admin
     11 subjects:
     12   - kind: ServiceAccount
     13     name: gerrit-operator
     14     namespace: gerrit
     15 roleRef:
     16   kind: ClusterRole
     17   name: gerrit-operator
     18   apiGroup: ""
     19 ---
     20 apiVersion: rbac.authorization.k8s.io/v1
     21 kind: ClusterRole
     22 metadata:
     23   name: gerrit-operator
     24 rules:
     25   - apiGroups:
     26       - "batch"
     27     resources:
     28       - cronjobs
     29       - jobs
     30     verbs:
     31       - "*"
     32   - apiGroups:
     33       - "apps"
     34     resources:
     35       - statefulsets
     36       - deployments
     37     verbs:
     38       - "*"
     39   - apiGroups:
     40       - ""
     41     resources:
     42       - configmaps
     43       - persistentvolumeclaims
     44       - secrets
     45       - services
     46     verbs:
     47       - "*"
     48   - apiGroups:
     49       - "storage.k8s.io"
     50     resources:
     51       - storageclasses
     52     verbs:
     53       - "get"
     54       - "list"
     55   - apiGroups:
     56       - "apiextensions.k8s.io"
     57     resources:
     58       - customresourcedefinitions
     59     verbs:
     60       - "*"
     61   - apiGroups:
     62       - "gerritoperator.google.com"
     63     resources:
     64       - "*"
     65     verbs:
     66       - "*"
     67   - apiGroups:
     68       - "admissionregistration.k8s.io"
     69     resources:
     70       - "validatingwebhookconfigurations"
     71     verbs:
     72       - "*"
     73   - apiGroups:
     74       - "networking.k8s.io"
     75     resources:
     76       - ingresses
     77     verbs:
     78       - "*"