diff options
Diffstat (limited to 'data.d/k3s-master/manifests.d/tyilnet/cicd-system/argo-events/rbac.yaml')
-rw-r--r-- | data.d/k3s-master/manifests.d/tyilnet/cicd-system/argo-events/rbac.yaml | 97 |
1 files changed, 97 insertions, 0 deletions
diff --git a/data.d/k3s-master/manifests.d/tyilnet/cicd-system/argo-events/rbac.yaml b/data.d/k3s-master/manifests.d/tyilnet/cicd-system/argo-events/rbac.yaml new file mode 100644 index 0000000..a646f66 --- /dev/null +++ b/data.d/k3s-master/manifests.d/tyilnet/cicd-system/argo-events/rbac.yaml @@ -0,0 +1,97 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: argo-events-webhook + namespace: cicd-system +automountServiceAccountToken: true +... +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: argo-events-webhook +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - create + - update + - delete + - patch + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - get + - list +- apiGroups: + - admissionregistration.k8s.io + resources: + - validatingwebhookconfigurations + verbs: + - get + - list + - create + - update + - delete + - patch + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles + verbs: + - get + - list +- apiGroups: + - argoproj.io + resources: + - eventbus + - eventsources + - sensors + verbs: + - get + - list + - watch +- apiGroups: + - argoproj.io + resources: + - workflows + verbs: + - get + - list + - create + - update + - patch + - watch +... +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: argo-events-webhook + namespace: cicd-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: argo-events-webhook +subjects: +- kind: ServiceAccount + name: argo-events-webhook + namespace: cicd-system +... |