4 corev1 "k8s.io/api/core/v1"
\r
5 metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
\r
6 rbacv1 "k8s.io/api/rbac/v1"
\r
9 func GetClusterRole() []*rbacv1.ClusterRole {
\r
11 clusterRole1 := &rbacv1.ClusterRole{
\r
12 ObjectMeta: metav1.ObjectMeta{
\r
13 Name: "svcacct-ricplt-appmgr-ricxapp-access",
\r
15 Rules: []rbacv1.PolicyRule{
\r
18 APIGroups: []string{
\r
22 Resources: []string{
\r
32 APIGroups: []string{
\r
36 Resources: []string{
\r
52 APIGroups: []string{
\r
56 Resources: []string{
\r
67 TypeMeta: metav1.TypeMeta{
\r
68 Kind: "ClusterRole",
\r
69 APIVersion: "rbac.authorization.k8s.io/v1",
\r
73 clusterRole2 := &rbacv1.ClusterRole{
\r
74 Rules: []rbacv1.PolicyRule{
\r
77 APIGroups: []string{
\r
81 Resources: []string{
\r
97 TypeMeta: metav1.TypeMeta{
\r
98 APIVersion: "rbac.authorization.k8s.io/v1",
\r
99 Kind: "ClusterRole",
\r
101 ObjectMeta: metav1.ObjectMeta{
\r
102 Name: "svcacct-ricplt-appmgr-ricxapp-getappconfig",
\r
106 clusterRole3 := &rbacv1.ClusterRole{
\r
107 ObjectMeta: metav1.ObjectMeta{
\r
108 Labels: map[string]string{
\r
109 "app.kubernetes.io/version": "1.4",
\r
110 "helm.sh/chart": "kong-0.36.6",
\r
111 "app.kubernetes.io/instance": "release-name",
\r
112 "app.kubernetes.io/managed-by": "Helm",
\r
113 "app.kubernetes.io/name": "kong",
\r
115 Name: "release-name-kong",
\r
117 Rules: []rbacv1.PolicyRule{
\r
120 Resources: []string{
\r
132 APIGroups: []string{
\r
138 APIGroups: []string{
\r
142 Resources: []string{
\r
152 APIGroups: []string{
\r
156 Resources: []string{
\r
168 APIGroups: []string{
\r
171 "networking.k8s.io",
\r
173 Resources: []string{
\r
185 APIGroups: []string{
\r
189 Resources: []string{
\r
200 APIGroups: []string{
\r
203 "networking.k8s.io",
\r
205 Resources: []string{
\r
207 "ingresses/status",
\r
221 APIGroups: []string{
\r
223 "configuration.konghq.com",
\r
225 Resources: []string{
\r
234 TypeMeta: metav1.TypeMeta{
\r
235 APIVersion: "rbac.authorization.k8s.io/v1",
\r
236 Kind: "ClusterRole",
\r
240 clusterRole4 := &rbacv1.ClusterRole{
\r
241 ObjectMeta: metav1.ObjectMeta{
\r
242 Labels: map[string]string{
\r
243 "app.kubernetes.io/managed-by": "Helm",
\r
244 "app.kubernetes.io/name": "kong",
\r
245 "app.kubernetes.io/version": "1.4",
\r
246 "helm.sh/chart": "kong-0.36.6",
\r
247 "app.kubernetes.io/instance": "release-name",
\r
249 Name: "release-name-kong",
\r
251 Rules: []rbacv1.PolicyRule{
\r
254 APIGroups: []string{
\r
258 Resources: []string{
\r
272 Resources: []string{
\r
280 APIGroups: []string{
\r
292 APIGroups: []string{
\r
296 Resources: []string{
\r
302 APIGroups: []string{
\r
305 "networking.k8s.io",
\r
307 Resources: []string{
\r
319 Resources: []string{
\r
328 APIGroups: []string{
\r
334 APIGroups: []string{
\r
337 "networking.k8s.io",
\r
339 Resources: []string{
\r
341 "ingresses/status",
\r
349 APIGroups: []string{
\r
351 "configuration.konghq.com",
\r
353 Resources: []string{
\r
368 TypeMeta: metav1.TypeMeta{
\r
369 APIVersion: "rbac.authorization.k8s.io/v1",
\r
370 Kind: "ClusterRole",
\r
374 return []*rbacv1.ClusterRole{clusterRole1, clusterRole2, clusterRole3, clusterRole4}
\r