ceph-csi/vendor/k8s.io/kubernetes/cluster/addons/calico-policy-controller/calico-clusterrole.yaml

80 lines
1.4 KiB
YAML
Raw Normal View History

2018-01-09 18:57:14 +00:00
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: calico
namespace: kube-system
labels:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
rules:
- apiGroups: [""]
resources:
- namespaces
verbs:
- get
- list
- watch
- apiGroups: [""]
resources:
- endpoints
verbs:
- get
- apiGroups: [""]
resources:
- services
verbs:
- get
- apiGroups: [""]
resources:
- pods/status
verbs:
- update
- apiGroups: [""]
resources:
- pods
verbs:
- get
- list
- watch
2018-07-18 14:47:22 +00:00
- patch
2018-01-09 18:57:14 +00:00
- apiGroups: [""]
resources:
- nodes
verbs:
- get
- list
- update
- watch
- apiGroups: ["extensions"]
resources:
- networkpolicies
verbs:
- get
- list
- watch
2018-07-18 14:47:22 +00:00
- apiGroups: ["networking.k8s.io"]
resources:
- networkpolicies
verbs:
- watch
- list
2018-01-09 18:57:14 +00:00
- apiGroups: ["crd.projectcalico.org"]
resources:
- globalfelixconfigs
2018-07-18 14:47:22 +00:00
- felixconfigurations
- bgppeers
2018-01-09 18:57:14 +00:00
- globalbgpconfigs
2018-07-18 14:47:22 +00:00
- bgpconfigurations
2018-01-09 18:57:14 +00:00
- ippools
- globalnetworkpolicies
2018-07-18 14:47:22 +00:00
- globalnetworksets
- networkpolicies
- clusterinformations
- hostendpoints
2018-01-09 18:57:14 +00:00
verbs:
- create
- get
- list
- update
- watch