Skip to content

Commit 16996b9

Browse files
committed
01-cluster-admin
1 parent a191e41 commit 16996b9

File tree

6 files changed

+27
-381
lines changed

6 files changed

+27
-381
lines changed
Lines changed: 5 additions & 97 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
{{- if and .Values.options.operatorController.enabled (not (has "BoxcutterRuntime" .Values.operatorConrollerFeatures)) }}
1+
{{- if .Values.options.operatorController.enabled }}
22
apiVersion: rbac.authorization.k8s.io/v1
33
kind: ClusterRole
44
metadata:
@@ -9,106 +9,14 @@ metadata:
99
annotations:
1010
{{- include "olmv1.annotations" . | nindent 4 }}
1111
rules:
12-
- apiGroups:
13-
- ""
14-
resources:
15-
- serviceaccounts/token
16-
verbs:
17-
- create
18-
- apiGroups:
19-
- ""
20-
resources:
21-
- serviceaccounts
22-
verbs:
23-
- get
24-
- apiGroups:
25-
- apiextensions.k8s.io
26-
resources:
27-
- customresourcedefinitions
28-
verbs:
29-
- get
30-
- apiGroups:
31-
- olm.operatorframework.io
32-
resources:
33-
- clustercatalogs
34-
verbs:
35-
- get
36-
- list
37-
- watch
38-
- apiGroups:
39-
- olm.operatorframework.io
40-
resources:
41-
- clusterextensions
42-
verbs:
43-
- get
44-
- list
45-
- patch
46-
- update
47-
- watch
48-
- apiGroups:
49-
- olm.operatorframework.io
50-
resources:
51-
- clusterextensions/finalizers
52-
verbs:
53-
- update
54-
- apiGroups:
55-
- olm.operatorframework.io
56-
resources:
57-
- clusterextensions/status
58-
verbs:
59-
- patch
60-
- update
61-
- apiGroups:
62-
- rbac.authorization.k8s.io
63-
resources:
64-
- clusterrolebindings
65-
- clusterroles
66-
- rolebindings
67-
- roles
68-
verbs:
69-
- list
70-
- watch
71-
{{- if .Values.options.openshift.enabled }}
72-
- apiGroups:
73-
- security.openshift.io
74-
resources:
75-
- securitycontextconstraints
76-
resourceNames:
77-
- privileged
78-
verbs:
79-
- use
80-
{{- end }}
81-
{{- if has "BoxcutterRuntime" .Values.options.operatorController.features.enabled }}
8212
- apiGroups:
8313
- "*"
8414
resources:
8515
- "*"
8616
verbs:
87-
- list
88-
- watch
89-
- apiGroups:
90-
- olm.operatorframework.io
91-
resources:
92-
- clusterextensionrevisions
93-
verbs:
94-
- create
95-
- get
96-
- list
97-
- patch
98-
- update
99-
- watch
100-
- apiGroups:
101-
- olm.operatorframework.io
102-
resources:
103-
- clusterextensionrevisions/status
104-
verbs:
105-
- patch
106-
- update
107-
- apiGroups:
108-
- olm.operatorframework.io
109-
resources:
110-
- clusterextensionrevisions/finalizers
17+
- "*"
18+
- nonResourceURLs:
19+
- "*"
11120
verbs:
112-
- update
113-
{{- end }}
21+
- "*"
11422
{{- end }}

helm/olmv1/templates/rbac/clusterrolebinding-operator-controller-manager-rolebinding.yml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,7 @@ metadata:
88
labels:
99
app.kubernetes.io/name: operator-controller
1010
{{- include "olmv1.labels" $ | nindent 4 }}
11-
{{- if has "BoxcutterRuntime" .Values.options.operatorController.features.enabled }}
12-
name: operator-controller-manager-admin-rolebinding
13-
{{- else }}
1411
name: operator-controller-manager-rolebinding
15-
{{- end }}
1612
roleRef:
1713
apiGroup: rbac.authorization.k8s.io
1814
kind: ClusterRole

manifests/experimental-e2e.yaml

Lines changed: 5 additions & 85 deletions
Original file line numberDiff line numberDiff line change
@@ -1805,96 +1805,16 @@ metadata:
18051805
annotations:
18061806
olm.operatorframework.io/feature-set: experimental-e2e
18071807
rules:
1808-
- apiGroups:
1809-
- ""
1810-
resources:
1811-
- serviceaccounts/token
1812-
verbs:
1813-
- create
1814-
- apiGroups:
1815-
- ""
1816-
resources:
1817-
- serviceaccounts
1818-
verbs:
1819-
- get
1820-
- apiGroups:
1821-
- apiextensions.k8s.io
1822-
resources:
1823-
- customresourcedefinitions
1824-
verbs:
1825-
- get
1826-
- apiGroups:
1827-
- olm.operatorframework.io
1828-
resources:
1829-
- clustercatalogs
1830-
verbs:
1831-
- get
1832-
- list
1833-
- watch
1834-
- apiGroups:
1835-
- olm.operatorframework.io
1836-
resources:
1837-
- clusterextensions
1838-
verbs:
1839-
- get
1840-
- list
1841-
- patch
1842-
- update
1843-
- watch
1844-
- apiGroups:
1845-
- olm.operatorframework.io
1846-
resources:
1847-
- clusterextensions/finalizers
1848-
verbs:
1849-
- update
1850-
- apiGroups:
1851-
- olm.operatorframework.io
1852-
resources:
1853-
- clusterextensions/status
1854-
verbs:
1855-
- patch
1856-
- update
1857-
- apiGroups:
1858-
- rbac.authorization.k8s.io
1859-
resources:
1860-
- clusterrolebindings
1861-
- clusterroles
1862-
- rolebindings
1863-
- roles
1864-
verbs:
1865-
- list
1866-
- watch
18671808
- apiGroups:
18681809
- "*"
18691810
resources:
18701811
- "*"
18711812
verbs:
1872-
- list
1873-
- watch
1874-
- apiGroups:
1875-
- olm.operatorframework.io
1876-
resources:
1877-
- clusterextensionrevisions
1878-
verbs:
1879-
- create
1880-
- get
1881-
- list
1882-
- patch
1883-
- update
1884-
- watch
1885-
- apiGroups:
1886-
- olm.operatorframework.io
1887-
resources:
1888-
- clusterextensionrevisions/status
1889-
verbs:
1890-
- patch
1891-
- update
1892-
- apiGroups:
1893-
- olm.operatorframework.io
1894-
resources:
1895-
- clusterextensionrevisions/finalizers
1813+
- "*"
1814+
- nonResourceURLs:
1815+
- "*"
18961816
verbs:
1897-
- update
1817+
- "*"
18981818
---
18991819
# Source: olmv1/templates/rbac/clusterrolebinding-catalogd-manager-rolebinding.yml
19001820
apiVersion: rbac.authorization.k8s.io/v1
@@ -1962,7 +1882,7 @@ metadata:
19621882
labels:
19631883
app.kubernetes.io/name: operator-controller
19641884
app.kubernetes.io/part-of: olm
1965-
name: operator-controller-manager-admin-rolebinding
1885+
name: operator-controller-manager-rolebinding
19661886
roleRef:
19671887
apiGroup: rbac.authorization.k8s.io
19681888
kind: ClusterRole

manifests/experimental.yaml

Lines changed: 5 additions & 85 deletions
Original file line numberDiff line numberDiff line change
@@ -1766,96 +1766,16 @@ metadata:
17661766
annotations:
17671767
olm.operatorframework.io/feature-set: experimental
17681768
rules:
1769-
- apiGroups:
1770-
- ""
1771-
resources:
1772-
- serviceaccounts/token
1773-
verbs:
1774-
- create
1775-
- apiGroups:
1776-
- ""
1777-
resources:
1778-
- serviceaccounts
1779-
verbs:
1780-
- get
1781-
- apiGroups:
1782-
- apiextensions.k8s.io
1783-
resources:
1784-
- customresourcedefinitions
1785-
verbs:
1786-
- get
1787-
- apiGroups:
1788-
- olm.operatorframework.io
1789-
resources:
1790-
- clustercatalogs
1791-
verbs:
1792-
- get
1793-
- list
1794-
- watch
1795-
- apiGroups:
1796-
- olm.operatorframework.io
1797-
resources:
1798-
- clusterextensions
1799-
verbs:
1800-
- get
1801-
- list
1802-
- patch
1803-
- update
1804-
- watch
1805-
- apiGroups:
1806-
- olm.operatorframework.io
1807-
resources:
1808-
- clusterextensions/finalizers
1809-
verbs:
1810-
- update
1811-
- apiGroups:
1812-
- olm.operatorframework.io
1813-
resources:
1814-
- clusterextensions/status
1815-
verbs:
1816-
- patch
1817-
- update
1818-
- apiGroups:
1819-
- rbac.authorization.k8s.io
1820-
resources:
1821-
- clusterrolebindings
1822-
- clusterroles
1823-
- rolebindings
1824-
- roles
1825-
verbs:
1826-
- list
1827-
- watch
18281769
- apiGroups:
18291770
- "*"
18301771
resources:
18311772
- "*"
18321773
verbs:
1833-
- list
1834-
- watch
1835-
- apiGroups:
1836-
- olm.operatorframework.io
1837-
resources:
1838-
- clusterextensionrevisions
1839-
verbs:
1840-
- create
1841-
- get
1842-
- list
1843-
- patch
1844-
- update
1845-
- watch
1846-
- apiGroups:
1847-
- olm.operatorframework.io
1848-
resources:
1849-
- clusterextensionrevisions/status
1850-
verbs:
1851-
- patch
1852-
- update
1853-
- apiGroups:
1854-
- olm.operatorframework.io
1855-
resources:
1856-
- clusterextensionrevisions/finalizers
1774+
- "*"
1775+
- nonResourceURLs:
1776+
- "*"
18571777
verbs:
1858-
- update
1778+
- "*"
18591779
---
18601780
# Source: olmv1/templates/rbac/clusterrolebinding-catalogd-manager-rolebinding.yml
18611781
apiVersion: rbac.authorization.k8s.io/v1
@@ -1923,7 +1843,7 @@ metadata:
19231843
labels:
19241844
app.kubernetes.io/name: operator-controller
19251845
app.kubernetes.io/part-of: olm
1926-
name: operator-controller-manager-admin-rolebinding
1846+
name: operator-controller-manager-rolebinding
19271847
roleRef:
19281848
apiGroup: rbac.authorization.k8s.io
19291849
kind: ClusterRole

0 commit comments

Comments
 (0)