31dfc3e4d3
* Convert ClusterRoles to Roles for all components for multiple namespaces * Added templates for rules and role generator to dynamically generate roles for each component * Fix role-generator component templating * Enable namespaces variable for preupgradechecks Signed-off-by: Sanket Sudake <sanketsudake@gmail.com> Co-authored-by: shaunak_deshmukh <shaunak@infracloud.io> Co-authored-by: Sanket Sudake <sanketsudake@gmail.com>
172 lines
2.3 KiB
Smarty
172 lines
2.3 KiB
Smarty
{{- define "buildermgr-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- environments
|
|
- functions
|
|
- packages
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }}
|
|
{{- define "controller-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- canaryconfigs
|
|
- environments
|
|
- functions
|
|
- httptriggers
|
|
- kuberneteswatchtriggers
|
|
- messagequeuetriggers
|
|
- packages
|
|
- timetriggers
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }}
|
|
{{- define "executor-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- environments
|
|
- functions
|
|
- packages
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }}
|
|
{{- define "kubewatcher-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- environments
|
|
- functions
|
|
- kuberneteswatchtriggers
|
|
- packages
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }}
|
|
{{- define "kafka-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- environments
|
|
- functions
|
|
- messagequeuetriggers
|
|
- packages
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }}
|
|
{{- define "keda-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- environments
|
|
- functions
|
|
- messagequeuetriggers
|
|
- packages
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }}
|
|
{{- define "preupgrade-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- canaryconfigs
|
|
- environments
|
|
- functions
|
|
- httptriggers
|
|
- kuberneteswatchtriggers
|
|
- messagequeuetriggers
|
|
- packages
|
|
- timetriggers
|
|
verbs:
|
|
- list
|
|
{{- end }}
|
|
{{- define "router-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- environments
|
|
- functions
|
|
- httptriggers
|
|
- packages
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }}
|
|
{{- define "storagesvc-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- packages
|
|
verbs:
|
|
- get
|
|
- list
|
|
{{- end }}
|
|
{{- define "timer-rules" }}
|
|
rules:
|
|
- apiGroups:
|
|
- fission.io
|
|
resources:
|
|
- environments
|
|
- functions
|
|
- packages
|
|
- timetriggers
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- delete
|
|
{{- end }} |