Skip to content

Commit 04d2513

Browse files
Merge pull request #671 from aweiteka/rbac
add view rbac to 'admin' and 'edit' default roles
2 parents 4cd7c2e + 903f981 commit 04d2513

File tree

7 files changed

+21
-7
lines changed

7 files changed

+21
-7
lines changed

deploy/chart/templates/0000_50_olm_08-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1616
metadata:
1717
name: aggregate-olm-view
1818
labels:
19-
# Add these permissions to the "view" default roles
19+
# Add these permissions to the "admin", "edit" and "view" default roles
20+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
21+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2022
rbac.authorization.k8s.io/aggregate-to-view: "true"
2123
rules:
2224
- apiGroups: ["operators.coreos.com"]

deploy/ocp/manifests/0.7.2/0000_30_12-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

deploy/ocp/manifests/0.7.4/0000_30_12-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

deploy/ocp/manifests/0.8.1/0000_50_olm_08-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

deploy/okd/manifests/0.8.1/0000_50_olm_08-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

deploy/upstream/manifests/0.8.1/0000_50_olm_08-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

manifests/0000_50_olm_08-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1616
metadata:
1717
name: aggregate-olm-view
1818
labels:
19-
# Add these permissions to the "view" default roles
19+
# Add these permissions to the "admin", "edit" and "view" default roles
20+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
21+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2022
rbac.authorization.k8s.io/aggregate-to-view: "true"
2123
rules:
2224
- apiGroups: ["operators.coreos.com"]

0 commit comments

Comments
 (0)