2021-05-13 22:11:13 +00:00
|
|
|
{{- if .Values.createClusterScopedResources -}}
|
|
|
|
---
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
kind: ClusterRole
|
|
|
|
metadata:
|
|
|
|
name: {{ include "eck-operator.fullname" . }}
|
|
|
|
labels:
|
|
|
|
{{- include "eck-operator.labels" . | nindent 4 }}
|
|
|
|
rules:
|
|
|
|
{{ template "eck-operator.rbacRules" . | toYaml | indent 2 }}
|
|
|
|
{{ template "eck-operator.clusterWideRbacRules" . | toYaml | indent 2 }}
|
2022-04-29 18:22:20 +00:00
|
|
|
{{ if .Values.config.exposedNodeLabels }}
|
|
|
|
{{ template "eck-operator.readNodeLabelsRbacRule" . | toYaml | indent 2 }}
|
|
|
|
{{ end -}}
|
2021-05-13 22:11:13 +00:00
|
|
|
---
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
kind: ClusterRole
|
|
|
|
metadata:
|
|
|
|
name: "{{ include "eck-operator.name" . }}-view"
|
|
|
|
labels:
|
|
|
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
|
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
|
|
{{- include "eck-operator.labels" . | nindent 4 }}
|
|
|
|
rules:
|
|
|
|
- apiGroups: ["elasticsearch.k8s.elastic.co"]
|
|
|
|
resources: ["elasticsearches"]
|
|
|
|
verbs: ["get", "list", "watch"]
|
|
|
|
- apiGroups: ["apm.k8s.elastic.co"]
|
|
|
|
resources: ["apmservers"]
|
|
|
|
verbs: ["get", "list", "watch"]
|
|
|
|
- apiGroups: ["kibana.k8s.elastic.co"]
|
|
|
|
resources: ["kibanas"]
|
|
|
|
verbs: ["get", "list", "watch"]
|
|
|
|
- apiGroups: ["enterprisesearch.k8s.elastic.co"]
|
|
|
|
resources: ["enterprisesearches"]
|
|
|
|
verbs: ["get", "list", "watch"]
|
|
|
|
- apiGroups: ["beat.k8s.elastic.co"]
|
|
|
|
resources: ["beats"]
|
|
|
|
verbs: ["get", "list", "watch"]
|
2021-06-30 10:32:37 +00:00
|
|
|
- apiGroups: ["agent.k8s.elastic.co"]
|
|
|
|
resources: ["agents"]
|
|
|
|
verbs: ["get", "list", "watch"]
|
|
|
|
- apiGroups: ["maps.k8s.elastic.co"]
|
|
|
|
resources: ["elasticmapsservers"]
|
|
|
|
verbs: ["get", "list", "watch"]
|
2021-05-13 22:11:13 +00:00
|
|
|
---
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
kind: ClusterRole
|
|
|
|
metadata:
|
|
|
|
name: "{{ include "eck-operator.name" . }}-edit"
|
|
|
|
labels:
|
|
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
|
|
{{- include "eck-operator.labels" . | nindent 4 }}
|
|
|
|
rules:
|
|
|
|
- apiGroups: ["elasticsearch.k8s.elastic.co"]
|
|
|
|
resources: ["elasticsearches"]
|
|
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
|
|
- apiGroups: ["apm.k8s.elastic.co"]
|
|
|
|
resources: ["apmservers"]
|
|
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
|
|
- apiGroups: ["kibana.k8s.elastic.co"]
|
|
|
|
resources: ["kibanas"]
|
|
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
|
|
- apiGroups: ["enterprisesearch.k8s.elastic.co"]
|
|
|
|
resources: ["enterprisesearches"]
|
|
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
|
|
- apiGroups: ["beat.k8s.elastic.co"]
|
|
|
|
resources: ["beats"]
|
|
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
2021-06-30 10:32:37 +00:00
|
|
|
- apiGroups: ["agent.k8s.elastic.co"]
|
|
|
|
resources: ["agents"]
|
|
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
|
|
- apiGroups: ["maps.k8s.elastic.co"]
|
|
|
|
resources: ["elasticmapsservers"]
|
|
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
2021-05-13 22:11:13 +00:00
|
|
|
{{- end -}}
|