Extract out permissions for fission.io componenets per-component (#2570)

* Extract out permissions for fission.io components per-component * PR review changes * Fix file names * Fix the filename for the router
2022-10-17 14:01:19 +05:30
parent d933f0ba6c
commit 8d65b062f1
32 changed files with 359 additions and 189 deletions
@@ -0,0 +1,33 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Release.Name }}-timer-fission-cr
+rules:
+- apiGroups:
+  - fission.io
+  resources:
+  - environments
+  - functions
+  - packages
+  - timetriggers
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Release.Name }}-timer-fission-cr
+subjects:
+  - kind: ServiceAccount
+    name: fission-timer
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Release.Name }}-timer-fission-cr
+  apiGroup: rbac.authorization.k8s.io