nyeki
fcb1a786be
Remove ArgoCD and Helm dependencies, add everything unnecessary to .dockerignore, add support for DB authentication in Payphone's CLI, make Scylla be fully managed by Ansible, add Payphone deployment ansible file
102 lines
1.6 KiB
YAML
102 lines
1.6 KiB
YAML
kind: ClusterRole
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: scylladb:aggregate-to-csi-external-provisioner
|
|
labels:
|
|
rbac.operator.scylladb.com/aggregate-to-csi-external-provisioner: "true"
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- "persistentvolumes"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- "watch"
|
|
- "create"
|
|
- "delete"
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- "persistentvolumeclaims"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- "watch"
|
|
- "update"
|
|
- apiGroups:
|
|
- "storage.k8s.io"
|
|
resources:
|
|
- "storageclasses"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- "watch"
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- "events"
|
|
verbs:
|
|
- "list"
|
|
- "watch"
|
|
- "create"
|
|
- "update"
|
|
- "patch"
|
|
- apiGroups:
|
|
- "snapshot.storage.k8s.io"
|
|
resources:
|
|
- "volumesnapshots"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- apiGroups:
|
|
- "snapshot.storage.k8s.io"
|
|
resources:
|
|
- "volumesnapshotcontents"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- apiGroups:
|
|
- "storage.k8s.io"
|
|
resources:
|
|
- "csinodes"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- "watch"
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- "nodes"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- "watch"
|
|
- apiGroups:
|
|
- "storage.k8s.io"
|
|
resources:
|
|
- "csistoragecapacities"
|
|
verbs:
|
|
- "get"
|
|
- "list"
|
|
- "watch"
|
|
- "create"
|
|
- "update"
|
|
- "patch"
|
|
- "delete"
|
|
# The GET permissions below are needed for walking up the ownership chain
|
|
# for CSIStorageCapacity. They are sufficient for deployment via
|
|
# StatefulSet (only needs to get Pod) and Deployment (needs to get
|
|
# Pod and then ReplicaSet to find the Deployment).
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- "pods"
|
|
verbs:
|
|
- "get"
|
|
- apiGroups:
|
|
- "apps"
|
|
resources:
|
|
- "replicasets"
|
|
verbs:
|
|
- "get" |