pkg/operator/controllers/rbac/staticresources/clusterrole.yaml (673 lines of code) (raw):
# Code generated by hack/gendiscoverycache; DO NOT EDIT.
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
creationTimestamp: null
name: system:aro-sre
rules:
- apiGroups:
- ""
resources:
- componentstatuses
verbs:
- get
- list
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- events
- limitranges
- namespaces
- nodes
- persistentvolumeclaims
- persistentvolumes
- pods
- podtemplates
- replicationcontrollers
- resourcequotas
- serviceaccounts
- services
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods/log
verbs:
- get
- apiGroups:
- admissionregistration.k8s.io
resources:
- mutatingwebhookconfigurations
- validatingwebhookconfigurations
verbs:
- get
- list
- watch
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
verbs:
- get
- list
- watch
- apiGroups:
- apiregistration.k8s.io
resources:
- apiservices
verbs:
- get
- list
- watch
- apiGroups:
- apiserver.openshift.io
resources:
- apirequestcounts
verbs:
- get
- list
- watch
- apiGroups:
- apps
resources:
- controllerrevisions
- daemonsets
- deployments
- replicasets
- statefulsets
verbs:
- get
- list
- watch
- apiGroups:
- apps.openshift.io
resources:
- deploymentconfigs
verbs:
- get
- list
- watch
- apiGroups:
- apps.openshift.io
resources:
- deploymentconfigs/log
verbs:
- get
- apiGroups:
- aro.openshift.io
resources:
- clusters
verbs:
- get
- list
- watch
- apiGroups:
- authentication.k8s.io
resources:
- tokenreviews
verbs:
- create
- apiGroups:
- authorization.k8s.io
resources:
- selfsubjectaccessreviews
- selfsubjectrulesreviews
- subjectaccessreviews
verbs:
- create
- apiGroups:
- authorization.openshift.io
resources:
- clusterrolebindings
- clusterroles
- rolebindings
- roles
verbs:
- get
- list
- apiGroups:
- authorization.openshift.io
resources:
- resourceaccessreviews
- subjectaccessreviews
verbs:
- create
- apiGroups:
- authorization.openshift.io
resources:
- rolebindingrestrictions
verbs:
- get
- list
- watch
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- get
- list
- watch
- apiGroups:
- autoscaling.openshift.io
resources:
- clusterautoscalers
- machineautoscalers
verbs:
- get
- list
- watch
- apiGroups:
- batch
resources:
- cronjobs
- jobs
verbs:
- get
- list
- watch
- apiGroups:
- build.openshift.io
resources:
- buildconfigs
- builds
verbs:
- get
- list
- watch
- apiGroups:
- build.openshift.io
resources:
- builds/log
verbs:
- get
- apiGroups:
- certificates.k8s.io
resources:
- certificatesigningrequests
verbs:
- get
- list
- watch
- apiGroups:
- cloud.network.openshift.io
resources:
- cloudprivateipconfigs
verbs:
- get
- list
- watch
- apiGroups:
- cloudcredential.openshift.io
resources:
- credentialsrequests
verbs:
- get
- list
- watch
- apiGroups:
- config.openshift.io
resources:
- apiservers
- authentications
- builds
- clusteroperators
- clusterversions
- consoles
- dnses
- featuregates
- imagecontentpolicies
- images
- infrastructures
- ingresses
- networks
- nodes
- oauths
- operatorhubs
- projects
- proxies
- schedulers
verbs:
- get
- list
- watch
- apiGroups:
- console.openshift.io
resources:
- consoleclidownloads
- consoleexternalloglinks
- consolelinks
- consolenotifications
- consoleplugins
- consolequickstarts
- consoleyamlsamples
verbs:
- get
- list
- watch
- apiGroups:
- controlplane.operator.openshift.io
resources:
- podnetworkconnectivitychecks
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- get
- list
- watch
- apiGroups:
- events.k8s.io
resources:
- events
verbs:
- get
- list
- watch
- apiGroups:
- flowcontrol.apiserver.k8s.io
resources:
- flowschemas
- prioritylevelconfigurations
verbs:
- get
- list
- watch
- apiGroups:
- helm.openshift.io
resources:
- helmchartrepositories
- projecthelmchartrepositories
verbs:
- get
- list
- watch
- apiGroups:
- image.openshift.io
resources:
- images
- imagestreams
verbs:
- get
- list
- watch
- apiGroups:
- image.openshift.io
resources:
- imagestreamimages
verbs:
- get
- apiGroups:
- image.openshift.io
resources:
- imagestreamtags
- imagetags
verbs:
- get
- list
- apiGroups:
- imageregistry.operator.openshift.io
resources:
- configs
- imagepruners
verbs:
- get
- list
- watch
- apiGroups:
- ingress.operator.openshift.io
resources:
- dnsrecords
verbs:
- get
- list
- watch
- apiGroups:
- k8s.cni.cncf.io
resources:
- network-attachment-definitions
verbs:
- get
- list
- watch
- apiGroups:
- k8s.ovn.org
resources:
- egressfirewalls
- egressips
- egressqoses
verbs:
- get
- list
- watch
- apiGroups:
- machine.openshift.io
resources:
- machinehealthchecks
- machines
- machinesets
- controlplanemachinesets
verbs:
- get
- list
- watch
- apiGroups:
- machineconfiguration.openshift.io
resources:
- containerruntimeconfigs
- controllerconfigs
- kubeletconfigs
- machineconfigpools
- machineconfigs
verbs:
- get
- list
- watch
- apiGroups:
- metrics.k8s.io
resources:
- nodes
- pods
verbs:
- get
- list
- apiGroups:
- migration.k8s.io
resources:
- storagestates
- storageversionmigrations
verbs:
- get
- list
- watch
- apiGroups:
- monitoring.coreos.com
resources:
- alertmanagerconfigs
- alertmanagers
- podmonitors
- probes
- prometheuses
- prometheusrules
- servicemonitors
- thanosrulers
verbs:
- get
- list
- watch
- apiGroups:
- network.operator.openshift.io
resources:
- egressrouters
- operatorpkis
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
- ingresses
- networkpolicies
verbs:
- get
- list
- watch
- apiGroups:
- node.k8s.io
resources:
- runtimeclasses
verbs:
- get
- list
- watch
- apiGroups:
- operator.openshift.io
resources:
- authentications
- cloudcredentials
- clustercsidrivers
- configs
- consoles
- csisnapshotcontrollers
- dnses
- etcds
- imagecontentsourcepolicies
- ingresscontrollers
- kubeapiservers
- kubecontrollermanagers
- kubeschedulers
- kubestorageversionmigrators
- networks
- openshiftapiservers
- openshiftcontrollermanagers
- servicecas
- storages
verbs:
- get
- list
- watch
- apiGroups:
- operators.coreos.com
resources:
- catalogsources
- clusterserviceversions
- installplans
- olmconfigs
- operatorconditions
- operatorgroups
- operators
- subscriptions
verbs:
- get
- list
- watch
- apiGroups:
- packages.operators.coreos.com
resources:
- packagemanifests
verbs:
- get
- list
- apiGroups:
- performance.openshift.io
resources:
- performanceprofiles
verbs:
- get
- list
- watch
- apiGroups:
- policy
resources:
- poddisruptionbudgets
- podsecuritypolicies
verbs:
- get
- list
- watch
- apiGroups:
- preview.aro.openshift.io
resources:
- previewfeatures
verbs:
- get
- list
- watch
- apiGroups:
- project.openshift.io
resources:
- projectrequests
verbs:
- list
- apiGroups:
- project.openshift.io
resources:
- projects
verbs:
- get
- list
- watch
- apiGroups:
- quota.openshift.io
resources:
- appliedclusterresourcequotas
verbs:
- get
- list
- apiGroups:
- quota.openshift.io
resources:
- clusterresourcequotas
verbs:
- get
- list
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterrolebindings
- clusterroles
- rolebindings
- roles
verbs:
- get
- list
- watch
- apiGroups:
- route.openshift.io
resources:
- routes
verbs:
- get
- list
- watch
- apiGroups:
- samples.operator.openshift.io
resources:
- configs
verbs:
- get
- list
- watch
- apiGroups:
- scheduling.k8s.io
resources:
- priorityclasses
verbs:
- get
- list
- watch
- apiGroups:
- security.internal.openshift.io
resources:
- rangeallocations
verbs:
- get
- list
- watch
- apiGroups:
- security.openshift.io
resources:
- rangeallocations
- securitycontextconstraints
verbs:
- get
- list
- watch
- apiGroups:
- snapshot.storage.k8s.io
resources:
- volumesnapshotclasses
- volumesnapshotcontents
- volumesnapshots
verbs:
- get
- list
- watch
- apiGroups:
- storage.k8s.io
resources:
- csidrivers
- csinodes
- csistoragecapacities
- storageclasses
- volumeattachments
verbs:
- get
- list
- watch
- apiGroups:
- template.openshift.io
resources:
- brokertemplateinstances
- templateinstances
- templates
verbs:
- get
- list
- watch
- apiGroups:
- tuned.openshift.io
resources:
- profiles
- tuneds
verbs:
- get
- list
- watch
- apiGroups:
- upgrade.managed.openshift.io
resources:
- upgradeconfigs
verbs:
- get
- list
- watch
- apiGroups:
- user.openshift.io
resources:
- groups
- identities
- users
verbs:
- get
- list
- watch
- apiGroups:
- user.openshift.io
resources:
- useridentitymappings
verbs:
- get
- apiGroups:
- whereabouts.cni.cncf.io
resources:
- ippools
- overlappingrangeipreservations
verbs:
- get
- list
- watch
- nonResourceURLs:
- '*'
verbs:
- get