update rbac role: read

zero0r1 · Oct 27, 2019 · 2582e11 · 2582e11
1 parent e8471ff
commit 2582e11
Show file tree

Hide file tree

Showing 2 changed files with 40 additions and 6 deletions.
diff --git a/manifests/dashboard/read-user-sa-rbac.yaml b/manifests/dashboard/read-user-sa-rbac.yaml
@@ -29,15 +29,16 @@ rules:
   resources:
   - configmaps
   - endpoints
+  - nodes
+  - persistentvolumes
   - persistentvolumeclaims
+  - persistentvolumeclaims/status
   - pods
   - replicationcontrollers
   - replicationcontrollers/scale
   - serviceaccounts
   - services
-  - nodes
-  - persistentvolumeclaims
-  - persistentvolumes
+  - services/status
   verbs:
   - get
   - list
@@ -69,12 +70,18 @@ rules:
 - apiGroups:
   - apps
   resources:
+  - controllerrevisions
   - daemonsets
+  - daemonsets/status
   - deployments
   - deployments/scale
+  - deployments/status
   - replicasets
   - replicasets/scale
+  - replicasets/status
   - statefulsets
+  - statefulsets/scale
+  - statefulsets/status
   verbs:
   - get
   - list
@@ -83,6 +90,7 @@ rules:
   - autoscaling
   resources:
   - horizontalpodautoscalers
+  - horizontalpodautoscalers/status
   verbs:
   - get
   - list
@@ -91,7 +99,9 @@ rules:
   - batch
   resources:
   - cronjobs
+  - cronjobs/status
   - jobs
+  - jobs/status
   verbs:
   - get
   - list
@@ -100,12 +110,16 @@ rules:
   - extensions
   resources:
   - daemonsets
+  - daemonsets/status
   - deployments
   - deployments/scale
+  - deployments/status
   - ingresses
+  - ingresses/status
   - networkpolicies
   - replicasets
   - replicasets/scale
+  - replicasets/status
   - replicationcontrollers/scale
   verbs:
   - get
@@ -115,13 +129,16 @@ rules:
   - policy
   resources:
   - poddisruptionbudgets
+  - poddisruptionbudgets/status
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - networking.k8s.io
   resources:
+  - ingresses
+  - ingresses/status
   - networkpolicies
   verbs:
   - get

diff --git a/roles/deploy/files/read-group-rbac.yaml b/roles/deploy/files/read-group-rbac.yaml
@@ -22,15 +22,16 @@ rules:
   resources:
   - configmaps
   - endpoints
+  - nodes
+  - persistentvolumes
   - persistentvolumeclaims
+  - persistentvolumeclaims/status
   - pods
   - replicationcontrollers
   - replicationcontrollers/scale
   - serviceaccounts
   - services
-  - nodes
-  - persistentvolumeclaims
-  - persistentvolumes
+  - services/status
   verbs:
   - get
   - list
@@ -62,12 +63,18 @@ rules:
 - apiGroups:
   - apps
   resources:
+  - controllerrevisions
   - daemonsets
+  - daemonsets/status
   - deployments
   - deployments/scale
+  - deployments/status
   - replicasets
   - replicasets/scale
+  - replicasets/status
   - statefulsets
+  - statefulsets/scale
+  - statefulsets/status
   verbs:
   - get
   - list
@@ -76,6 +83,7 @@ rules:
   - autoscaling
   resources:
   - horizontalpodautoscalers
+  - horizontalpodautoscalers/status
   verbs:
   - get
   - list
@@ -84,7 +92,9 @@ rules:
   - batch
   resources:
   - cronjobs
+  - cronjobs/status
   - jobs
+  - jobs/status
   verbs:
   - get
   - list
@@ -93,12 +103,16 @@ rules:
   - extensions
   resources:
   - daemonsets
+  - daemonsets/status
   - deployments
   - deployments/scale
+  - deployments/status
   - ingresses
+  - ingresses/status
   - networkpolicies
   - replicasets
   - replicasets/scale
+  - replicasets/status
   - replicationcontrollers/scale
   verbs:
   - get
@@ -108,13 +122,16 @@ rules:
   - policy
   resources:
   - poddisruptionbudgets
+  - poddisruptionbudgets/status
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - networking.k8s.io
   resources:
+  - ingresses
+  - ingresses/status
   - networkpolicies
   verbs:
   - get