airshipctl/manifests/function/baremetal-operator/rbac/bm-operator-rbac.yaml
Nikolay Fedorov 2ca469830b Add Bare Metal Operator resources
Add CRD, RBAC, operator's Deployment, NameSpace
Relates-To: #105

Change-Id: I049b577193547a7e762da26fa9762171025f2dff
2020-03-20 10:22:31 +04:00

75 lines
1.1 KiB
YAML

---
apiVersion: v1
kind: ServiceAccount
metadata:
name: metal3-baremetal-operator
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
creationTimestamp: null
name: metal3-baremetal-operator
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- "*"
- apiGroups:
- ""
resources:
- events
- secrets
verbs:
- "*"
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- get
- create
- apiGroups:
- metal3.io
resources:
- baremetalhosts
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- metal3.io
resources:
- baremetalhosts/status
verbs:
- get
- patch
- update
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: metal3-baremetal-operator
subjects:
- kind: ServiceAccount
name: metal3-baremetal-operator
- kind: User
name: developer
roleRef:
kind: ClusterRole
name: metal3-baremetal-operator
apiGroup: rbac.authorization.k8s.io