263 lines
4.0 KiB
YAML
263 lines
4.0 KiB
YAML
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: "deck"
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- prowjobs
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: test-pods
|
|
name: "deck"
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/log
|
|
verbs:
|
|
- get
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: "horologium"
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- prowjobs
|
|
verbs:
|
|
- create
|
|
- list
|
|
- watch
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: "sinker"
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- prowjobs
|
|
verbs:
|
|
- delete
|
|
- list
|
|
- watch
|
|
- get
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
resourceNames:
|
|
- prow-sinker-leaderlock
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
resourceNames:
|
|
- prow-sinker-leaderlock
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- events
|
|
verbs:
|
|
- create
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: test-pods
|
|
name: "sinker"
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- delete
|
|
- list
|
|
- watch
|
|
- get
|
|
- patch
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: "hook"
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- prowjobs
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- create
|
|
- get
|
|
- update
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: "tide"
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- prowjobs
|
|
verbs:
|
|
- create
|
|
- list
|
|
- get
|
|
- watch
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: "statusreconciler"
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- prowjobs
|
|
verbs:
|
|
- create
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: prow-controller-manager
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- prowjobs
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
resourceNames:
|
|
- prow-controller-manager-leader-lock
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
resourceNames:
|
|
- prow-controller-manager-leader-lock
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- events
|
|
verbs:
|
|
- create
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: test-pods
|
|
name: prow-controller-manager
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- delete
|
|
- list
|
|
- watch
|
|
- create
|
|
- patch
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: prow
|
|
name: crier
|
|
rules:
|
|
- apiGroups:
|
|
- "prow.k8s.io"
|
|
resources:
|
|
- "prowjobs"
|
|
verbs:
|
|
- "get"
|
|
- "watch"
|
|
- "list"
|
|
- "patch"
|
|
---
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
namespace: test-pods
|
|
name: crier
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- "pods"
|
|
- "events"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- "pods"
|
|
verbs:
|
|
- "patch"
|