85 lines
2 KiB
YAML
85 lines
2 KiB
YAML
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: project-delivery-controller
|
|
rules:
|
|
- apiGroups: [delivery.quorate.dev]
|
|
resources: [projectdeliveries]
|
|
verbs: [get, list, watch, update]
|
|
- apiGroups: [delivery.quorate.dev]
|
|
resources: [projectdeliveries/status]
|
|
verbs: [get, patch, update]
|
|
- apiGroups: [argoproj.io]
|
|
resources: [workflows]
|
|
verbs: [create, get, list, patch]
|
|
- apiGroups: [argoproj.io]
|
|
resources: [workflowtemplates]
|
|
verbs: [create, get, list, update]
|
|
- apiGroups: [""]
|
|
resources: [configmaps]
|
|
verbs: [create, get]
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: project-delivery-controller
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: project-delivery-controller
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: project-delivery-controller
|
|
namespace: project-delivery
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: project-delivery-executor
|
|
namespace: project-delivery
|
|
rules:
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- workflowtaskresults
|
|
verbs:
|
|
- create
|
|
- patch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: project-delivery-executor
|
|
namespace: project-delivery
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: project-delivery-executor
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: project-delivery-executor
|
|
namespace: project-delivery
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: delivery-leader
|
|
namespace: project-delivery
|
|
rules:
|
|
- apiGroups: [coordination.k8s.io]
|
|
resources: [leases]
|
|
verbs: [create, get, update]
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: delivery-leader
|
|
namespace: project-delivery
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: delivery-leader
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: project-delivery-controller
|
|
namespace: project-delivery
|