aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/common/roles-wrapper/templates/role.yaml
diff options
context:
space:
mode:
authorKrzysztof Opasiak <k.opasiak@samsung.com>2021-10-11 14:20:37 +0000
committerGerrit Code Review <gerrit@onap.org>2021-10-11 14:20:37 +0000
commitfb34105beb50d9212c51e9fb75d144b271346f1c (patch)
tree1a360861d4f03f85cd0e07b67a13ba7d8ea9ba98 /kubernetes/common/roles-wrapper/templates/role.yaml
parent193fd76e03c8edca83d1a548636c78d1c7d7a689 (diff)
parent37481801565c24fd5651a812adac5387f8e50e2f (diff)
Merge "[DCAEGEN2] Update chart with service account"
Diffstat (limited to 'kubernetes/common/roles-wrapper/templates/role.yaml')
-rw-r--r--kubernetes/common/roles-wrapper/templates/role.yaml16
1 files changed, 15 insertions, 1 deletions
diff --git a/kubernetes/common/roles-wrapper/templates/role.yaml b/kubernetes/common/roles-wrapper/templates/role.yaml
index e2a84b4151..0be6c7bbd6 100644
--- a/kubernetes/common/roles-wrapper/templates/role.yaml
+++ b/kubernetes/common/roles-wrapper/templates/role.yaml
@@ -32,6 +32,7 @@ rules:
resources:
- pods
- deployments
+ - deployments/status
- jobs
- jobs/status
- statefulsets
@@ -52,6 +53,7 @@ rules:
resources:
- pods
- deployments
+ - deployments/status
- jobs
- jobs/status
- statefulsets
@@ -59,6 +61,7 @@ rules:
- replicasets/status
- daemonsets
- secrets
+ - services
verbs:
- get
- watch
@@ -68,6 +71,7 @@ rules:
- apps
resources:
- statefulsets
+ - configmaps
verbs:
- patch
- apiGroups:
@@ -76,6 +80,8 @@ rules:
resources:
- deployments
- secrets
+ - services
+ - pods
verbs:
- create
- apiGroups:
@@ -85,7 +91,8 @@ rules:
- pods
- persistentvolumeclaims
- secrets
- - deployment
+ - deployments
+ - services
verbs:
- delete
- apiGroups:
@@ -95,6 +102,13 @@ rules:
- pods/exec
verbs:
- create
+- apiGroups:
+ - cert-manager.io
+ resources:
+ - certificates
+ verbs:
+ - create
+ - delete
{{- else }}
# if you don't match read or create, then you're not allowed to use API
# except to see basic information about yourself