X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;ds=sidebyside;f=ric-platform%2F50-RIC-Platform%2Fhelm%2Fkong%2Fcharts%2Fkong%2Ftemplates%2Fcontroller-cluster-role.yaml;fp=ric-platform%2F50-RIC-Platform%2Fhelm%2Fkong%2Fcharts%2Fkong%2Ftemplates%2Fcontroller-cluster-role.yaml;h=2a4bc808d5ae8158716aad09cc0dd651568583dd;hb=c3993d1b897672cba96a53605d0d5d8788518536;hp=0000000000000000000000000000000000000000;hpb=581a3a371b3d0adfb6d9c831ad6877c3e07df0cd;p=it%2Fdep.git diff --git a/ric-platform/50-RIC-Platform/helm/kong/charts/kong/templates/controller-cluster-role.yaml b/ric-platform/50-RIC-Platform/helm/kong/charts/kong/templates/controller-cluster-role.yaml new file mode 100755 index 00000000..2a4bc808 --- /dev/null +++ b/ric-platform/50-RIC-Platform/helm/kong/charts/kong/templates/controller-cluster-role.yaml @@ -0,0 +1,68 @@ +{{- if and .Values.ingressController.rbac.create .Values.ingressController.enabled -}} +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRole +metadata: + labels: + app: {{ template "kong.name" . }} + chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" + release: "{{ .Release.Name }}" + heritage: "{{ .Release.Service }}" + name: {{ template "kong.fullname" . }} +rules: + - apiGroups: + - "" + resources: + - endpoints + - nodes + - pods + - secrets + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - nodes + verbs: + - get + - apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - watch + - apiGroups: + - "extensions" + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "extensions" + resources: + - ingresses/status + verbs: + - update + - apiGroups: + - "configuration.konghq.com" + resources: + - kongplugins + - kongcredentials + - kongconsumers + - kongingresses + verbs: + - get + - list + - watch +{{- end -}}