Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add more privileges to appowners on staging.

Browse source
This commit is contained in:
Adam Saleh 2021-03-15 16:13:37 +01:00
parent 8dd920c9b2
commit 7bbb860d52
1 changed files with 20 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

20
roles/openshift/project/templates/role-appowners.yml
View file

@ -6,6 +6,11 @@ metadata:
name: appowner
namespace: "{{ app }}"
rules:
{% if env == "staging" %}
- apiGroups: ["monitoring.coreos.com"]
resources: ["alertmanagers", "prometheuses", "prometheusrules", "servicemonitors", "podmonitors"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
{% endif %}
- apiGroups:
- "*"
attributeRestrictions: null
@ -74,6 +79,11 @@ rules:
- get
- list
- watch
{% if env == "staging" %}
- create
- delete
- update
{% endif %}
- apiGroups:
- "*"
attributeRestrictions: null
@ -99,6 +109,11 @@ rules:
- get
- list
- watch
{% if env == "staging" %}
- create
- delete
- update
{% endif %}
- apiGroups:
- batch
attributeRestrictions: null
@ -110,6 +125,11 @@ rules:
- get
- list
- watch
{% if env == "staging" %}
- create
- delete
- update
{% endif %}
- apiGroups:
- build.openshift.io
attributeRestrictions: null