libre.sh/config/rbac/role.yaml

1092 lines
13 KiB
YAML

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: manager-role
rules:
- apiGroups:
- ""
resources:
- configmaps
- persistentvolumeclaims
- secrets
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- configmaps
- secrets
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- endpoints
- secrets
- serviceaccounts
- services
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- persistentvolumeclaims
verbs:
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- persistentvolumeclaims/status
verbs:
- get
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- secrets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- secrets
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- '*'
resources:
- '*'
verbs:
- '*'
- apiGroups:
- acid.zalan.do
resources:
- postgresqls
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- deployments
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- statefulsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- decidims
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- decidims/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- decidims/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- discourses
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- discourses/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- discourses/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- grists
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- grists/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- grists/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- hedgedocs
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- hedgedocs/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- hedgedocs/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- libreofficeonlines
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- libreofficeonlines/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- libreofficeonlines/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- listmonks
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- listmonks/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- listmonks/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- mobilizons
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- mobilizons/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- mobilizons/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- nextclouds
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- nextclouds/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- nextclouds/status
verbs:
- get
- patch
- update
- apiGroups:
- apps.libre.sh
resources:
- plankas
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps.libre.sh
resources:
- plankas/finalizers
verbs:
- update
- apiGroups:
- apps.libre.sh
resources:
- plankas/status
verbs:
- get
- patch
- update
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- batch
resources:
- jobs
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- cert-manager.io
resources:
- certificates
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- '*'
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- buckets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- buckets
- postgres
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- buckets
- postgres
- redis
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- buckets/finalizers
verbs:
- update
- apiGroups:
- core.libre.sh
resources:
- buckets/status
verbs:
- get
- patch
- update
- apiGroups:
- core.libre.sh
resources:
- mailboxes
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- mailboxes/finalizers
verbs:
- update
- apiGroups:
- core.libre.sh
resources:
- mailboxes/status
verbs:
- get
- patch
- update
- apiGroups:
- core.libre.sh
resources:
- oidcclients
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- oidcclients/finalizers
verbs:
- update
- apiGroups:
- core.libre.sh
resources:
- oidcclients/status
verbs:
- get
- patch
- update
- apiGroups:
- core.libre.sh
resources:
- postgres
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- postgres/finalizers
verbs:
- update
- apiGroups:
- core.libre.sh
resources:
- postgres/status
verbs:
- get
- patch
- update
- apiGroups:
- core.libre.sh
resources:
- redis
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- redis/finalizers
verbs:
- update
- apiGroups:
- core.libre.sh
resources:
- redis/status
verbs:
- get
- patch
- update
- apiGroups:
- core.libre.sh
resources:
- samlclients
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- samlclients/finalizers
verbs:
- update
- apiGroups:
- core.libre.sh
resources:
- samlclients/status
verbs:
- get
- patch
- update
- apiGroups:
- core.libre.sh
resources:
- tenants
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- core.libre.sh
resources:
- tenants/finalizers
verbs:
- update
- apiGroups:
- core.libre.sh
resources:
- tenants/status
verbs:
- get
- patch
- update
- apiGroups:
- endpointmonitor.stakater.com
resources:
- endpointmonitors
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- keycloak.libre.sh
resources:
- keycloaks
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- keycloak.libre.sh
resources:
- keycloaks/finalizers
verbs:
- update
- apiGroups:
- keycloak.libre.sh
resources:
- keycloaks/status
verbs:
- get
- patch
- update
- apiGroups:
- keycloak.libre.sh
resources:
- realms
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- keycloak.libre.sh
resources:
- realms/finalizers
verbs:
- update
- apiGroups:
- keycloak.libre.sh
resources:
- realms/status
verbs:
- get
- patch
- update
- apiGroups:
- libre.sh
resources:
- forgejoes
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- libre.sh
resources:
- forgejoes/finalizers
verbs:
- update
- apiGroups:
- libre.sh
resources:
- forgejoes/status
verbs:
- get
- patch
- update
- apiGroups:
- libre.sh
resources:
- imports
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- libre.sh
resources:
- imports/finalizers
verbs:
- update
- apiGroups:
- libre.sh
resources:
- imports/status
verbs:
- get
- patch
- update
- apiGroups:
- lifecycle.libre.sh
resources:
- maintenances
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- lifecycle.libre.sh
resources:
- maintenances/finalizers
verbs:
- update
- apiGroups:
- lifecycle.libre.sh
resources:
- maintenances/status
verbs:
- get
- patch
- update
- apiGroups:
- matrix.libre.sh
resources:
- elementcalls
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- matrix.libre.sh
resources:
- elementcalls/finalizers
verbs:
- update
- apiGroups:
- matrix.libre.sh
resources:
- elementcalls/status
verbs:
- get
- patch
- update
- apiGroups:
- matrix.libre.sh
resources:
- elements
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- matrix.libre.sh
resources:
- elements/finalizers
verbs:
- update
- apiGroups:
- matrix.libre.sh
resources:
- elements/status
verbs:
- get
- patch
- update
- apiGroups:
- matrix.libre.sh
resources:
- mediarepoes
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- matrix.libre.sh
resources:
- mediarepoes/finalizers
verbs:
- update
- apiGroups:
- matrix.libre.sh
resources:
- mediarepoes/status
verbs:
- get
- patch
- update
- apiGroups:
- matrix.libre.sh
resources:
- synapses
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- matrix.libre.sh
resources:
- synapses/finalizers
verbs:
- update
- apiGroups:
- matrix.libre.sh
resources:
- synapses/status
verbs:
- get
- patch
- update
- apiGroups:
- monitoring.coreos.com
resources:
- podmonitors
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- get
- apiGroups:
- policy
resources:
- poddisruptionbudgets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- portability.libre.sh
resources:
- infrastructuremigrations
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- portability.libre.sh
resources:
- infrastructuremigrations/finalizers
verbs:
- update
- apiGroups:
- portability.libre.sh
resources:
- infrastructuremigrations/status
verbs:
- get
- patch
- update
- apiGroups:
- portability.libre.sh
resources:
- migrations
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- portability.libre.sh
resources:
- migrations/finalizers
verbs:
- update
- apiGroups:
- portability.libre.sh
resources:
- migrations/status
verbs:
- get
- patch
- update
- apiGroups:
- portability.libre.sh
resources:
- tenantmigrations
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- portability.libre.sh
resources:
- tenantmigrations/finalizers
verbs:
- update
- apiGroups:
- portability.libre.sh
resources:
- tenantmigrations/status
verbs:
- get
- patch
- update
- apiGroups:
- portability.libre.sh
resources:
- wadertargets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- portability.libre.sh
resources:
- wadertargets/finalizers
verbs:
- update
- apiGroups:
- portability.libre.sh
resources:
- wadertargets/status
verbs:
- get
- patch
- update
- apiGroups:
- postgres.libre.sh
resources:
- clonejobs
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- postgres.libre.sh
resources:
- clonejobs/finalizers
verbs:
- update
- apiGroups:
- postgres.libre.sh
resources:
- clonejobs/status
verbs:
- get
- patch
- update
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
- roles
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- voip.libre.sh
resources:
- livekitservers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- voip.libre.sh
resources:
- livekitservers/finalizers
verbs:
- update
- apiGroups:
- voip.libre.sh
resources:
- livekitservers/status
verbs:
- get
- patch
- update