File tree Expand file tree Collapse file tree 2 files changed +71
-0
lines changed Expand file tree Collapse file tree 2 files changed +71
-0
lines changed Original file line number Diff line number Diff line change
1
+ apiVersion : rbac.authorization.k8s.io/v1
2
+ kind : Role
3
+ metadata :
4
+ annotations :
5
+ rbac.authorization.kubernetes.io/autoupdate : " true"
6
+ include.release.openshift.io/ibm-cloud-managed : " true"
7
+ include.release.openshift.io/self-managed-high-availability : " true"
8
+ name : copied-csv-viewer
9
+ namespace : openshift
10
+ rules :
11
+ - apiGroups :
12
+ - " operators.coreos.com"
13
+ resources :
14
+ - " clusterserviceversions"
15
+ verbs :
16
+ - get
17
+ - list
18
+ - watch
19
+ ---
20
+ apiVersion : rbac.authorization.k8s.io/v1
21
+ kind : RoleBinding
22
+ metadata :
23
+ annotations :
24
+ rbac.authorization.kubernetes.io/autoupdate : " true"
25
+ include.release.openshift.io/ibm-cloud-managed : " true"
26
+ include.release.openshift.io/self-managed-high-availability : " true"
27
+ name : copied-csv-viewers
28
+ namespace : openshift
29
+ roleRef :
30
+ apiGroup : rbac.authorization.k8s.io
31
+ kind : Role
32
+ name : copied-csv-viewer
33
+ subjects :
34
+ - apiGroup : rbac.authorization.k8s.io
35
+ kind : Group
36
+ name : system:authenticated
Original file line number Diff line number Diff line change @@ -346,6 +346,41 @@ metadata:
346
346
release.openshift.io/delete: "true"
347
347
EOF
348
348
349
+ cat << EOF > manifests/0000_50_olm_15-csv-viewer.rbac.yaml
350
+ apiVersion: rbac.authorization.k8s.io/v1
351
+ kind: Role
352
+ metadata:
353
+ annotations:
354
+ rbac.authorization.kubernetes.io/autoupdate: "true"
355
+ name: copied-csv-viewer
356
+ namespace: openshift
357
+ rules:
358
+ - apiGroups:
359
+ - "operators.coreos.com"
360
+ resources:
361
+ - "clusterserviceversions"
362
+ verbs:
363
+ - get
364
+ - list
365
+ - watch
366
+ ---
367
+ apiVersion: rbac.authorization.k8s.io/v1
368
+ kind: RoleBinding
369
+ metadata:
370
+ annotations:
371
+ rbac.authorization.kubernetes.io/autoupdate: "true"
372
+ name: copied-csv-viewers
373
+ namespace: openshift
374
+ roleRef:
375
+ apiGroup: rbac.authorization.k8s.io
376
+ kind: Role
377
+ name: copied-csv-viewer
378
+ subjects:
379
+ - apiGroup: rbac.authorization.k8s.io
380
+ kind: Group
381
+ name: system:authenticated
382
+ EOF
383
+
349
384
add_ibm_managed_cloud_annotations " ${ROOT_DIR} /manifests"
350
385
351
386
# requires gnu sed if on mac
You can’t perform that action at this time.
0 commit comments