Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
72 changes: 72 additions & 0 deletions clusters/app.ci/crt/admin_generated_rbac.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -478,3 +478,75 @@ subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-payload-modifiers
---
#---------------------------------------------------------------------------------
# rbac_resources.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: openshift-release-admins-binding
namespace: origin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: openshift-release-admins
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-admins
---
#---------------------------------------------------------------------------------
# rbac_resources.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: openshift-release-payload-modifiers-binding
namespace: origin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: openshift-release-payload-modifiers
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-payload-modifiers
---
#---------------------------------------------------------------------------------
# rbac_resources.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: openshift-release-admins-binding
namespace: origin-arm64
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: openshift-release-admins
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-admins
---
#---------------------------------------------------------------------------------
# rbac_resources.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: openshift-release-payload-modifiers-binding
namespace: origin-arm64
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: openshift-release-payload-modifiers
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-payload-modifiers
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-arm64-priv
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-arm64
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-multi-priv
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-multi
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-ppc64le-priv
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-ppc64le
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-priv
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
2 changes: 1 addition & 1 deletion clusters/app.ci/release-controller/admin-ocp-rbac.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-s390x-priv
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ metadata:
namespace: ci-release-s390x
rules:
- apiGroups:
- batch/v1
- batch
resources:
- jobs
verbs:
Expand Down
113 changes: 113 additions & 0 deletions clusters/app.ci/release-controller/admin-origin-arm64-rbac.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,113 @@
##################################################################################
# DO NOT EDIT
# File generated during execution of: generate-release-controllers.py
##################################################################################


#---------------------------------------------------------------------------------
# development_rbac.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: release-controller-developers-read-only
namespace: origin-arm64
rules:
- apiGroups:
- ''
resourceNames:
- release-upgrade-graph
resources:
- secrets
verbs:
- get
- list
- watch
- apiGroups:
- image.openshift.io
resources:
- imagestreams
- imagestreamtags
verbs:
- get
- list
- watch
---
#---------------------------------------------------------------------------------
# development_rbac.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: release-controller-developers-read-only-binding
namespace: origin-arm64
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: release-controller-developers-read-only
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-controller-developers
---
#---------------------------------------------------------------------------------
# development_rbac.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: release-controller-developers-monitoring
namespace: ci-release-arm64
rules:
- apiGroups:
- batch
resources:
- jobs
verbs:
- get
- list
- watch
Comment thread
coderabbitai[bot] marked this conversation as resolved.
- apiGroups:
- ''
resources:
- pods/attach
- pods/exec
verbs:
- create
- apiGroups:
- ''
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- ''
resources:
- namespaces
verbs:
- get
- list
- watch
---
#---------------------------------------------------------------------------------
# development_rbac.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: release-controller-developers-monitoring-binding
namespace: ci-release-arm64
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: release-controller-developers-monitoring
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-controller-developers
60 changes: 60 additions & 0 deletions clusters/app.ci/release-controller/admin-origin-rbac.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -96,3 +96,63 @@ subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-controller-developers
---
#---------------------------------------------------------------------------------
# development_rbac.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: release-controller-developers-monitoring
namespace: ci-release
rules:
- apiGroups:
- batch
resources:
- jobs
verbs:
- get
- list
- watch
- apiGroups:
- ''
resources:
- pods/attach
- pods/exec
verbs:
- create
- apiGroups:
- ''
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- ''
resources:
- namespaces
verbs:
- get
- list
- watch
---
#---------------------------------------------------------------------------------
# development_rbac.py added the following resource
#---------------------------------------------------------------------------------

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: release-controller-developers-monitoring-binding
namespace: ci-release
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: release-controller-developers-monitoring
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: openshift-release-controller-developers
Loading