infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

update apiGroups

Browse source
This commit is contained in:
Kevin Fenzi 2018-08-23 19:54:54 +00:00
parent 73e7e166e1
commit 53b40839ff
1 changed files with 11 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

28
roles/openshift/project/templates/role-appowners.yml
View file

@ -1,11 +1,5 @@
apiVersion: v1 apiVersion: v1
{% if env == "staging" %}
kind: Role kind: Role
{% else %}
# Namespace-local roles did not work until openshift 3.6
# https://github.com/openshift/origin/issues/14078
kind: ClusterRole
{% endif %}
metadata: metadata:
annotations: annotations:
openshift.io/description: An application owner. Can view everything but ConfigMaps. openshift.io/description: An application owner. Can view everything but ConfigMaps.
@ -13,7 +7,7 @@ metadata:
namespace: "{{ app }}" namespace: "{{ app }}"
rules: rules:
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- endpoints - endpoints
@ -34,7 +28,7 @@ rules:
- update - update
{% endif %} {% endif %}
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- bindings - bindings
@ -151,7 +145,7 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- imagestreamimages - imagestreamimages
@ -163,7 +157,7 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- imagestreams/status - imagestreams/status
@ -172,14 +166,14 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- projects - projects
verbs: verbs:
- get - get
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- appliedclusterresourcequotas - appliedclusterresourcequotas
@ -188,7 +182,7 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- routes - routes
@ -197,7 +191,7 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- routes/status - routes/status
@ -206,7 +200,7 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- processedtemplates - processedtemplates
@ -217,7 +211,7 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- buildlogs - buildlogs
@ -226,7 +220,7 @@ rules:
- list - list
- watch - watch
- apiGroups: - apiGroups:
- "" - "*"
attributeRestrictions: null attributeRestrictions: null
resources: resources:
- resourcequotausages - resourcequotausages