Nail/sless
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: sless_service CRD + ServiceReconciler, RBAC fix, split postgres/functions.tf, operator v0.1.41

Browse Source
This commit is contained in:
Naeel
2026-03-20 13:03:12 +03:00
parent dc65f7ab8f
commit 680beb675b
19 changed files with 2448 additions and 693 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployments/k8s/rbac.yaml
+4 -4
View File
@@ -1,4 +1,4 @@
# Изменено: 2026-03-09 (добавлен доступ к pods/log для feature B)
# Изменено: 2026-03-20 (добавлен Service CRD sless.kube5s.ru — services + status + finalizers)
# RBAC для sless оператора.
# ServiceAccount + ClusterRole + ClusterRoleBinding.
# ClusterRole нужен (не namespaced Role) потому что оператор создаёт
@@ -17,13 +17,13 @@ metadata:
rules:
# Наши CRD
- apiGroups: ["sless.kube5s.ru"]
resources: ["functions", "triggers", "functionjobs"]
resources: ["functions", "triggers", "functionjobs", "services"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: ["sless.kube5s.ru"]
resources: ["functions/status", "triggers/status", "functionjobs/status"]
resources: ["functions/status", "triggers/status", "functionjobs/status", "services/status"]
verbs: ["get", "update", "patch"]
- apiGroups: ["sless.kube5s.ru"]
resources: ["functions/finalizers", "triggers/finalizers", "functionjobs/finalizers"]
resources: ["functions/finalizers", "triggers/finalizers", "functionjobs/finalizers", "services/finalizers"]
verbs: ["update"]
# Deployments для функций
- apiGroups: ["apps"]