Skip to content

Commit 8cf95df

Browse files
committed
tmp: add role, rolebindings, deployments, daemonsets resources to all local roles
The question is why we need them in all the local roles.
1 parent 3302c40 commit 8cf95df

File tree

2 files changed

+51
-3
lines changed

2 files changed

+51
-3
lines changed

manifests/00-cluster-role.yaml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,9 +25,6 @@ rules:
2525
- ""
2626
resources:
2727
- namespaces
28-
resourceNames:
29-
- openshift-ingress
30-
- openshift-ingress-canary
3128
verbs:
3229
- "*"
3330

manifests/01-role.yaml

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,9 +34,17 @@ rules:
3434
- apps
3535
resources:
3636
- deployments
37+
- daemonsets
3738
- services
3839
verbs:
3940
- "*"
41+
- apiGroups:
42+
- rbac.authorization.k8s.io
43+
resources:
44+
- roles
45+
- rolebindings
46+
verbs:
47+
- "*"
4048
---
4149
# Role for the operator to manage the following resources in openshift-config namespace:
4250
# - Role and RoleBindings to manage RBAC for componentRoutes (configurable-route controller).
@@ -74,6 +82,15 @@ rules:
7482
- get
7583
- list
7684
- watch
85+
- apiGroups:
86+
- apps
87+
resources:
88+
- daemonsets
89+
- deployments
90+
verbs:
91+
- get
92+
- list
93+
- watch
7794
---
7895
# Role for the operator to publish the router certificates
7996
# in openshift-config-managed namespace (certificate-publisher controller).
@@ -113,6 +130,24 @@ rules:
113130
- default-ingress-cert
114131
verbs:
115132
- "*"
133+
- apiGroups:
134+
- apps
135+
resources:
136+
- daemonsets
137+
- deployments
138+
verbs:
139+
- get
140+
- list
141+
- watch
142+
- apiGroups:
143+
- rbac.authorization.k8s.io
144+
resources:
145+
- roles
146+
- rolebindings
147+
verbs:
148+
- get
149+
- list
150+
- watch
116151
---
117152
# Role for the operator to manage ingress controllers
118153
# in openshift-ingress namespace.
@@ -135,9 +170,17 @@ rules:
135170
- serviceaccounts
136171
verbs:
137172
- "*"
173+
- apiGroups:
174+
- rbac.authorization.k8s.io
175+
resources:
176+
- roles
177+
- rolebindings
178+
verbs:
179+
- "*"
138180
- apiGroups:
139181
- apps
140182
resources:
183+
- daemonsets
141184
- deployments
142185
verbs:
143186
- "*"
@@ -163,9 +206,17 @@ rules:
163206
- serviceaccounts
164207
verbs:
165208
- "*"
209+
- apiGroups:
210+
- rbac.authorization.k8s.io
211+
resources:
212+
- roles
213+
- rolebindings
214+
verbs:
215+
- "*"
166216
- apiGroups:
167217
- apps
168218
resources:
169219
- daemonsets
220+
- deployments
170221
verbs:
171222
- "*"

0 commit comments

Comments
 (0)