Skip to content

Commit 6bee143

Browse files
committed
add view rbac to 'admin' and 'edit' default roles
Signed-off-by: Aaron Weitekamp <[email protected]>
1 parent 96456a3 commit 6bee143

File tree

3 files changed

+9
-3
lines changed

3 files changed

+9
-3
lines changed

deploy/ocp/manifests/0.7.1/0000_30_12-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

deploy/ocp/manifests/0.7.2/0000_30_12-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

deploy/ocp/manifests/0.7.4/0000_30_12-aggregated.clusterrole.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,9 @@ apiVersion: rbac.authorization.k8s.io/v1
1818
metadata:
1919
name: aggregate-olm-view
2020
labels:
21-
# Add these permissions to the "view" default roles
21+
# Add these permissions to the "admin", "edit" and "view" default roles
22+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
23+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
2224
rbac.authorization.k8s.io/aggregate-to-view: "true"
2325
rules:
2426
- apiGroups: ["operators.coreos.com"]

0 commit comments

Comments
 (0)