diff options
Diffstat (limited to 'kud/deployment_infra/helm/kubevirt-operator/templates/clusterrole.yaml')
| -rw-r--r-- | kud/deployment_infra/helm/kubevirt-operator/templates/clusterrole.yaml | 234 |
1 files changed, 215 insertions, 19 deletions
diff --git a/kud/deployment_infra/helm/kubevirt-operator/templates/clusterrole.yaml b/kud/deployment_infra/helm/kubevirt-operator/templates/clusterrole.yaml index ae8faf3b..43db590f 100644 --- a/kud/deployment_infra/helm/kubevirt-operator/templates/clusterrole.yaml +++ b/kud/deployment_infra/helm/kubevirt-operator/templates/clusterrole.yaml @@ -30,14 +30,6 @@ metadata: kubevirt.io: "" rules: - apiGroups: - - "" - resources: - - secrets - verbs: - - create - - get - - update -- apiGroups: - kubevirt.io resources: - kubevirts @@ -84,6 +76,16 @@ rules: - apiGroups: - apps resources: + - controllerrevisions + verbs: + - watch + - list + - create + - delete + - patch +- apiGroups: + - apps + resources: - deployments - daemonsets verbs: @@ -192,11 +194,16 @@ rules: - apiGroups: - subresources.kubevirt.io resources: - - virtualmachines/start - - virtualmachines/stop - - virtualmachines/restart + - virtualmachineinstances/pause + - virtualmachineinstances/unpause + - virtualmachineinstances/addvolume + - virtualmachineinstances/removevolume + - virtualmachineinstances/freeze + - virtualmachineinstances/unfreeze + - virtualmachineinstances/softreboot verbs: - - put + - update + - get - apiGroups: - "" resources: @@ -290,6 +297,30 @@ rules: - list - watch - apiGroups: + - cdi.kubevirt.io + resources: + - datasources + verbs: + - get + - list + - watch +- apiGroups: + - flavor.kubevirt.io + resources: + - virtualmachineflavors + - virtualmachineclusterflavors + verbs: + - list + - watch +- apiGroups: + - migrations.kubevirt.io + resources: + - migrationpolicies + verbs: + - get + - list + - watch +- apiGroups: - "" resources: - configmaps @@ -344,6 +375,12 @@ rules: - apiGroups: - "" resources: + - pods/status + verbs: + - patch +- apiGroups: + - "" + resources: - nodes verbs: - get @@ -358,6 +395,15 @@ rules: verbs: - list - apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - watch + - list + - create + - delete +- apiGroups: - "" resources: - persistentvolumeclaims @@ -376,6 +422,19 @@ rules: verbs: - '*' - apiGroups: + - pool.kubevirt.io + resources: + - virtualmachinepools + - virtualmachinepools/finalizers + verbs: + - watch + - list + - create + - delete + - update + - patch + - get +- apiGroups: - kubevirt.io resources: - '*' @@ -386,8 +445,10 @@ rules: resources: - virtualmachineinstances/addvolume - virtualmachineinstances/removevolume + - virtualmachineinstances/freeze + - virtualmachineinstances/unfreeze + - virtualmachineinstances/softreboot verbs: - - get - update - apiGroups: - cdi.kubevirt.io @@ -445,20 +506,36 @@ rules: - list - watch - apiGroups: - - kubevirt.io + - flavor.kubevirt.io resources: - - virtualmachineinstances + - virtualmachineflavors + - virtualmachineclusterflavors verbs: - - update + - list + - watch +- apiGroups: + - migrations.kubevirt.io + resources: + - migrationpolicies + verbs: + - get - list - watch - apiGroups: - "" resources: - - persistentvolumeclaims + - namespaces verbs: - get - apiGroups: + - kubevirt.io + resources: + - virtualmachineinstances + verbs: + - update + - list + - watch +- apiGroups: - "" resources: - nodes @@ -499,6 +576,14 @@ rules: - list - watch - apiGroups: + - migrations.kubevirt.io + resources: + - migrationpolicies + verbs: + - get + - list + - watch +- apiGroups: - "" resources: - configmaps @@ -518,6 +603,9 @@ rules: resources: - virtualmachineinstances/console - virtualmachineinstances/vnc + - virtualmachineinstances/guestosinfo + - virtualmachineinstances/filesystemlist + - virtualmachineinstances/userlist verbs: - get - apiGroups: @@ -527,8 +615,10 @@ rules: - virtualmachineinstances/unpause - virtualmachineinstances/addvolume - virtualmachineinstances/removevolume + - virtualmachineinstances/freeze + - virtualmachineinstances/unfreeze + - virtualmachineinstances/softreboot verbs: - - get - update - apiGroups: - subresources.kubevirt.io @@ -571,10 +661,48 @@ rules: - watch - deletecollection - apiGroups: + - flavor.kubevirt.io + resources: + - virtualmachineflavors + - virtualmachineclusterflavors + verbs: + - get + - delete + - create + - update + - patch + - list + - watch + - deletecollection +- apiGroups: + - pool.kubevirt.io + resources: + - virtualmachinepools + verbs: + - get + - delete + - create + - update + - patch + - list + - watch + - deletecollection +- apiGroups: + - migrations.kubevirt.io + resources: + - migrationpolicies + verbs: + - get + - list + - watch +- apiGroups: - subresources.kubevirt.io resources: - virtualmachineinstances/console - virtualmachineinstances/vnc + - virtualmachineinstances/guestosinfo + - virtualmachineinstances/filesystemlist + - virtualmachineinstances/userlist verbs: - get - apiGroups: @@ -584,8 +712,10 @@ rules: - virtualmachineinstances/unpause - virtualmachineinstances/addvolume - virtualmachineinstances/removevolume + - virtualmachineinstances/freeze + - virtualmachineinstances/unfreeze + - virtualmachineinstances/softreboot verbs: - - get - update - apiGroups: - subresources.kubevirt.io @@ -626,6 +756,31 @@ rules: - list - watch - apiGroups: + - flavor.kubevirt.io + resources: + - virtualmachineflavors + - virtualmachineclusterflavors + verbs: + - get + - delete + - create + - update + - patch + - list + - watch +- apiGroups: + - pool.kubevirt.io + resources: + - virtualmachinepools + verbs: + - get + - delete + - create + - update + - patch + - list + - watch +- apiGroups: - kubevirt.io resources: - kubevirts @@ -633,6 +788,22 @@ rules: - get - list - apiGroups: + - migrations.kubevirt.io + resources: + - migrationpolicies + verbs: + - get + - list + - watch +- apiGroups: + - subresources.kubevirt.io + resources: + - virtualmachineinstances/guestosinfo + - virtualmachineinstances/filesystemlist + - virtualmachineinstances/userlist + verbs: + - get +- apiGroups: - kubevirt.io resources: - virtualmachines @@ -655,6 +826,31 @@ rules: - list - watch - apiGroups: + - flavor.kubevirt.io + resources: + - virtualmachineflavors + - virtualmachineclusterflavors + verbs: + - get + - list + - watch +- apiGroups: + - pool.kubevirt.io + resources: + - virtualmachinepools + verbs: + - get + - list + - watch +- apiGroups: + - migrations.kubevirt.io + resources: + - migrationpolicies + verbs: + - get + - list + - watch +- apiGroups: - authentication.k8s.io resources: - tokenreviews |