64 lines
2.3 KiB
YAML
64 lines
2.3 KiB
YAML
{{- if .Values.createClusterScopedResources -}}
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "eck-operator.fullname" . }}
|
|
labels:
|
|
{{- include "eck-operator.labels" . | nindent 4 }}
|
|
rules:
|
|
{{ template "eck-operator.rbacRules" . | toYaml | indent 2 }}
|
|
{{ template "eck-operator.clusterWideRbacRules" . | toYaml | indent 2 }}
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: "{{ include "eck-operator.name" . }}-view"
|
|
labels:
|
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
{{- include "eck-operator.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups: ["elasticsearch.k8s.elastic.co"]
|
|
resources: ["elasticsearches"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["apm.k8s.elastic.co"]
|
|
resources: ["apmservers"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["kibana.k8s.elastic.co"]
|
|
resources: ["kibanas"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["enterprisesearch.k8s.elastic.co"]
|
|
resources: ["enterprisesearches"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["beat.k8s.elastic.co"]
|
|
resources: ["beats"]
|
|
verbs: ["get", "list", "watch"]
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: "{{ include "eck-operator.name" . }}-edit"
|
|
labels:
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
{{- include "eck-operator.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups: ["elasticsearch.k8s.elastic.co"]
|
|
resources: ["elasticsearches"]
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
- apiGroups: ["apm.k8s.elastic.co"]
|
|
resources: ["apmservers"]
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
- apiGroups: ["kibana.k8s.elastic.co"]
|
|
resources: ["kibanas"]
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
- apiGroups: ["enterprisesearch.k8s.elastic.co"]
|
|
resources: ["enterprisesearches"]
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
- apiGroups: ["beat.k8s.elastic.co"]
|
|
resources: ["beats"]
|
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
|
{{- end -}}
|