constellation/operators/constellation-node-operator/config/rbac/role.yaml

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  creationTimestamp: null
  name: manager-role
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - get
  - list
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - ""
  resources:
  - nodes/status
  verbs:
  - get
- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - create
  - delete
  - get
  - list
  - update
  - watch
- apiGroups:
  - nodemaintenance.medik8s.io
  resources:
  - nodemaintenances
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - update.edgeless.systems
  resources:
  - autoscalingstrategies
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - update.edgeless.systems
  resources:
  - autoscalingstrategies/finalizers
  verbs:
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - autoscalingstrategies/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - joiningnodes
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - update.edgeless.systems
  resources:
  - joiningnodes/finalizers
  verbs:
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - joiningnodes/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - nodeversion
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - update.edgeless.systems
  resources:
  - nodeversion/status
  verbs:
  - get
- apiGroups:
  - update.edgeless.systems
  resources:
  - nodeversions
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - update.edgeless.systems
  resources:
  - nodeversions/finalizers
  verbs:
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - nodeversions/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - pendingnodes
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - update.edgeless.systems
  resources:
  - pendingnodes/finalizers
  verbs:
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - pendingnodes/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - scalinggroups
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - update.edgeless.systems
  resources:
  - scalinggroups/finalizers
  verbs:
  - update
- apiGroups:
  - update.edgeless.systems
  resources:
  - scalinggroups/status
  verbs:
  - get
  - patch
  - update
[node operator] NodeImage manifest gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 04:58:38 -04:00			`---`
			`apiVersion: rbac.authorization.k8s.io/v1`
			`kind: ClusterRole`
			`metadata:`
			`creationTimestamp: null`
			`name: manager-role`
			`rules:`
operator: reconcile kubernetesClusterVersion 2023-01-06 06:08:25 -05:00			`- apiGroups:`
			`- ""`
			`resources:`
			`- configmaps`
			`verbs:`
			`- get`
			`- list`
[node operator] RBAC: add missing permissions Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-07-20 04:53:03 -04:00			`- apiGroups:`
			`- ""`
			`resources:`
			`- nodes`
			`verbs:`
			`- create`
			`- delete`
			`- get`
			`- list`
			`- patch`
			`- update`
			`- watch`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- nodes/status`
			`verbs:`
			`- get`
[node operator] AutoscalingStrategy controller impl Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 06:35:02 -04:00			`- apiGroups:`
			`- apps`
			`resources:`
			`- deployments`
			`verbs:`
			`- create`
			`- delete`
			`- get`
			`- list`
			`- update`
			`- watch`
[node operator] ScalingGroup controller impl Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 07:48:40 -04:00			`- apiGroups:`
[node operator] RBAC: add missing permissions Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-07-20 04:53:03 -04:00			`- nodemaintenance.medik8s.io`
[node operator] ScalingGroup controller impl Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 07:48:40 -04:00			`resources:`
[node operator] RBAC: add missing permissions Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-07-20 04:53:03 -04:00			`- nodemaintenances`
[node operator] ScalingGroup controller impl Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 07:48:40 -04:00			`verbs:`
[node operator] RBAC: add missing permissions Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-07-20 04:53:03 -04:00			`- create`
			`- delete`
[node operator] ScalingGroup controller impl Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 07:48:40 -04:00			`- get`
[node operator] RBAC: add missing permissions Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-07-20 04:53:03 -04:00			`- list`
			`- patch`
			`- update`
			`- watch`
[node operator] AutoscalingStrategy API gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 04:59:51 -04:00			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- autoscalingstrategies`
			`verbs:`
			`- create`
			`- delete`
			`- get`
			`- list`
			`- patch`
			`- update`
			`- watch`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- autoscalingstrategies/finalizers`
			`verbs:`
			`- update`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- autoscalingstrategies/status`
			`verbs:`
			`- get`
			`- patch`
			`- update`
k8supdates: label nodes with k8s component hash 2022-12-06 12:48:01 -05:00			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- joiningnodes`
			`verbs:`
			`- create`
			`- delete`
			`- get`
			`- list`
			`- patch`
			`- update`
			`- watch`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- joiningnodes/finalizers`
			`verbs:`
			`- update`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- joiningnodes/status`
			`verbs:`
			`- get`
			`- patch`
			`- update`
[node operator] ScalingGroup controller impl Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 07:48:40 -04:00			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
upgrade: support Kubernetes components (#839) * upgrade: add Kubernetes components to NodeVersion * update rfc 2023-01-03 06:09:53 -05:00			`- nodeversion`
[node operator] ScalingGroup controller impl Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 07:48:40 -04:00			`verbs:`
			`- get`
			`- list`
			`- watch`
[node operator] NodeImage manifest gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 04:58:38 -04:00			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
upgrade: support Kubernetes components (#839) * upgrade: add Kubernetes components to NodeVersion * update rfc 2023-01-03 06:09:53 -05:00			`- nodeversion/status`
			`verbs:`
			`- get`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- nodeversions`
[node operator] NodeImage manifest gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 04:58:38 -04:00			`verbs:`
			`- create`
			`- delete`
			`- get`
			`- list`
			`- patch`
			`- update`
			`- watch`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
upgrade: support Kubernetes components (#839) * upgrade: add Kubernetes components to NodeVersion * update rfc 2023-01-03 06:09:53 -05:00			`- nodeversions/finalizers`
[node operator] NodeImage manifest gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 04:58:38 -04:00			`verbs:`
			`- update`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
upgrade: support Kubernetes components (#839) * upgrade: add Kubernetes components to NodeVersion * update rfc 2023-01-03 06:09:53 -05:00			`- nodeversions/status`
[node operator] NodeImage manifest gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 04:58:38 -04:00			`verbs:`
			`- get`
			`- patch`
			`- update`
[node operator] PendingNode API gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 05:01:54 -04:00			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- pendingnodes`
			`verbs:`
			`- create`
			`- delete`
			`- get`
			`- list`
			`- patch`
			`- update`
			`- watch`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- pendingnodes/finalizers`
			`verbs:`
			`- update`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- pendingnodes/status`
			`verbs:`
			`- get`
			`- patch`
			`- update`
[node operator] ScalingGroup API gen Signed-off-by: Malte Poll <mp@edgeless.systems> 2022-06-27 05:00:54 -04:00			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- scalinggroups`
			`verbs:`
			`- create`
			`- delete`
			`- get`
			`- list`
			`- patch`
			`- update`
			`- watch`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- scalinggroups/finalizers`
			`verbs:`
			`- update`
			`- apiGroups:`
			`- update.edgeless.systems`
			`resources:`
			`- scalinggroups/status`
			`verbs:`
			`- get`
			`- patch`
			`- update`