4b80adcfd8
* feat(argo-rollouts): add dashboard permission on Deployments - needed for Rollouts with workload referencing Signed-off-by: Ben Poland <ben.poland@faire.com> * Add podtemplates to match controller role Signed-off-by: Ben Poland <ben.poland@faire.com>
69 lines
1.3 KiB
YAML
69 lines
1.3 KiB
YAML
{{- if and .Values.dashboard.enabled .Values.clusterInstall }}
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "argo-rollouts.fullname" . }}-dashboard
|
|
labels:
|
|
app.kubernetes.io/component: {{ .Values.dashboard.component }}
|
|
{{- include "argo-rollouts.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- rollouts
|
|
- rollouts/status
|
|
- rollouts/finalizers
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- analysisruns
|
|
- analysisruns/finalizers
|
|
- experiments
|
|
- experiments/finalizers
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- analysistemplates
|
|
- clusteranalysistemplates
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
# deployments and podtemplates read access needed for workload reference support
|
|
- apiGroups:
|
|
- ""
|
|
- apps
|
|
resources:
|
|
- deployments
|
|
- podtemplates
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- replicasets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- list
|
|
- watch
|
|
{{- end }}
|