Merge pull request #318 from zfrhv/add-cluster-roles

Add permissions on hnc CRDs to default clusterRoles: cluster-reader, view, edit, admin

Author: k8s-ci-robot

config/rbac/aggregate_to_admin.yaml

@@ -0,0 +1,16 @@
+# Automatically aggregated to clusterRoles: admin
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: admin
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+- apiGroups:
+  - hnc.x-k8s.io
+  resources:
+  - hierarchicalresourcequotas
+  - subnamespaceanchors
+  - hierarchyconfigurations
+  verbs:
+  - '*'

config/rbac/aggregate_to_edit.yaml

@@ -0,0 +1,15 @@
+# Automatically aggregated to clusterRoles: edit -> admin
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: edit
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+- apiGroups:
+  - hnc.x-k8s.io
+  resources:
+  - hierarchicalresourcequotas
+  - subnamespaceanchors
+  verbs:
+  - '*'

config/rbac/aggregate_to_view.yaml

@@ -0,0 +1,16 @@
+# Automatically aggregated to clusterRoles: cluster-reader, view -> edit -> admin
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: view
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: "true"
+rules:
+- apiGroups:
+  - hnc.x-k8s.io
+  resources:
+  - '*'
+  verbs:
+  - get
+  - list
+  - watch

config/rbac/hnc_admin.yaml

@@ -1,6 +1,8 @@
 resources:
 - role.yaml
 - role_binding.yaml
-- hnc_admin.yaml
+- aggregate_to_view.yaml
+- aggregate_to_edit.yaml
+- aggregate_to_admin.yaml
 - leader_election_role.yaml
 - leader_election_role_binding.yaml