File tree Expand file tree Collapse file tree 2 files changed +51
-3
lines changed Expand file tree Collapse file tree 2 files changed +51
-3
lines changed Original file line number Diff line number Diff line change 25
25
- " "
26
26
resources :
27
27
- namespaces
28
- resourceNames :
29
- - openshift-ingress
30
- - openshift-ingress-canary
31
28
verbs :
32
29
- " *"
33
30
Original file line number Diff line number Diff line change @@ -34,9 +34,17 @@ rules:
34
34
- apps
35
35
resources :
36
36
- deployments
37
+ - daemonsets
37
38
- services
38
39
verbs :
39
40
- " *"
41
+ - apiGroups :
42
+ - rbac.authorization.k8s.io
43
+ resources :
44
+ - roles
45
+ - rolebindings
46
+ verbs :
47
+ - " *"
40
48
---
41
49
# Role for the operator to manage the following resources in openshift-config namespace:
42
50
# - Role and RoleBindings to manage RBAC for componentRoutes (configurable-route controller).
@@ -74,6 +82,15 @@ rules:
74
82
- get
75
83
- list
76
84
- watch
85
+ - apiGroups :
86
+ - apps
87
+ resources :
88
+ - daemonsets
89
+ - deployments
90
+ verbs :
91
+ - get
92
+ - list
93
+ - watch
77
94
---
78
95
# Role for the operator to publish the router certificates
79
96
# in openshift-config-managed namespace (certificate-publisher controller).
@@ -113,6 +130,24 @@ rules:
113
130
- default-ingress-cert
114
131
verbs :
115
132
- " *"
133
+ - apiGroups :
134
+ - apps
135
+ resources :
136
+ - daemonsets
137
+ - deployments
138
+ verbs :
139
+ - get
140
+ - list
141
+ - watch
142
+ - apiGroups :
143
+ - rbac.authorization.k8s.io
144
+ resources :
145
+ - roles
146
+ - rolebindings
147
+ verbs :
148
+ - get
149
+ - list
150
+ - watch
116
151
---
117
152
# Role for the operator to manage ingress controllers
118
153
# in openshift-ingress namespace.
@@ -135,9 +170,17 @@ rules:
135
170
- serviceaccounts
136
171
verbs :
137
172
- " *"
173
+ - apiGroups :
174
+ - rbac.authorization.k8s.io
175
+ resources :
176
+ - roles
177
+ - rolebindings
178
+ verbs :
179
+ - " *"
138
180
- apiGroups :
139
181
- apps
140
182
resources :
183
+ - daemonsets
141
184
- deployments
142
185
verbs :
143
186
- " *"
@@ -163,9 +206,17 @@ rules:
163
206
- serviceaccounts
164
207
verbs :
165
208
- " *"
209
+ - apiGroups :
210
+ - rbac.authorization.k8s.io
211
+ resources :
212
+ - roles
213
+ - rolebindings
214
+ verbs :
215
+ - " *"
166
216
- apiGroups :
167
217
- apps
168
218
resources :
169
219
- daemonsets
220
+ - deployments
170
221
verbs :
171
222
- " *"
You can’t perform that action at this time.
0 commit comments