metering-operator-role.yaml 2.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155
  1. apiVersion: rbac.authorization.k8s.io/v1
  2. kind: Role
  3. metadata:
  4. name: metering-operator
  5. rules:
  6. - apiGroups:
  7. - metering.openshift.io
  8. resources:
  9. - '*'
  10. verbs:
  11. - '*'
  12. - apiGroups:
  13. - ""
  14. resources:
  15. - pods
  16. - pods/attach
  17. - pods/exec
  18. - pods/portforward
  19. - pods/proxy
  20. verbs:
  21. - create
  22. - delete
  23. - deletecollection
  24. - get
  25. - list
  26. - patch
  27. - update
  28. - watch
  29. - apiGroups:
  30. - ""
  31. resources:
  32. - configmaps
  33. - endpoints
  34. - persistentvolumeclaims
  35. - replicationcontrollers
  36. - replicationcontrollers/scale
  37. - secrets
  38. - serviceaccounts
  39. - services
  40. - services/proxy
  41. verbs:
  42. - create
  43. - delete
  44. - deletecollection
  45. - get
  46. - list
  47. - patch
  48. - update
  49. - watch
  50. - apiGroups:
  51. - ""
  52. resources:
  53. - bindings
  54. - events
  55. - limitranges
  56. - namespaces/status
  57. - pods/log
  58. - pods/status
  59. - replicationcontrollers/status
  60. - resourcequotas
  61. - resourcequotas/status
  62. verbs:
  63. - get
  64. - list
  65. - watch
  66. - apiGroups:
  67. - ""
  68. resources:
  69. - events
  70. verbs:
  71. - create
  72. - update
  73. - patch
  74. - apiGroups:
  75. - ""
  76. resources:
  77. - namespaces
  78. verbs:
  79. - get
  80. - list
  81. - watch
  82. - apiGroups:
  83. - apps
  84. resources:
  85. - deployments
  86. - deployments/rollback
  87. - deployments/scale
  88. - statefulsets
  89. verbs:
  90. - create
  91. - delete
  92. - deletecollection
  93. - get
  94. - list
  95. - patch
  96. - update
  97. - watch
  98. - apiGroups:
  99. - batch
  100. resources:
  101. - cronjobs
  102. - jobs
  103. verbs:
  104. - create
  105. - delete
  106. - deletecollection
  107. - get
  108. - list
  109. - patch
  110. - update
  111. - watch
  112. - apiGroups:
  113. - extensions
  114. resources:
  115. - daemonsets
  116. - deployments
  117. - deployments/rollback
  118. - deployments/scale
  119. - replicasets
  120. - replicasets/scale
  121. - replicationcontrollers/scale
  122. verbs:
  123. - create
  124. - delete
  125. - deletecollection
  126. - get
  127. - list
  128. - patch
  129. - update
  130. - watch
  131. - apiGroups:
  132. - rbac.authorization.k8s.io
  133. resources:
  134. - rolebindings
  135. - roles
  136. verbs:
  137. - create
  138. - delete
  139. - deletecollection
  140. - get
  141. - list
  142. - patch
  143. - update
  144. - watch
  145. - apiGroups:
  146. - route.openshift.io
  147. resources:
  148. - routes
  149. verbs:
  150. - create
  151. - get
  152. - list
  153. - watch
  154. - update
  155. - delete