netflux-kubernetes/deploy/base/inflated/ingress-nginx/templates/controller-role.yaml

114 lines
2.1 KiB
YAML
Raw Normal View History

---
# Source: ingress-nginx/templates/controller-role.yaml
2022-05-02 17:36:04 +00:00
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
2022-12-20 08:01:25 +00:00
helm.sh/chart: ingress-nginx-4.4.0
app.kubernetes.io/name: ingress-nginx
app.kubernetes.io/instance: ingress-nginx
2022-12-20 08:01:25 +00:00
app.kubernetes.io/version: "1.5.1"
app.kubernetes.io/part-of: ingress-nginx
app.kubernetes.io/managed-by: Helm
2022-05-02 17:36:04 +00:00
app.kubernetes.io/component: controller
name: ingress-nginx
namespace: default
2022-05-02 17:36:04 +00:00
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
2022-12-20 08:01:25 +00:00
# TODO(Jintao Zhang)
# Once we release a new version of the controller,
# we will be able to remove the configmap related permissions
# We have used the Lease API for selection
# ref: https://github.com/kubernetes/ingress-nginx/pull/8921
2022-05-02 17:36:04 +00:00
- apiGroups:
- ""
resources:
- configmaps
resourceNames:
2022-12-20 08:01:25 +00:00
- ingress-nginx-leader
2022-05-02 17:36:04 +00:00
verbs:
- get
- update
- apiGroups:
- ""
resources:
- configmaps
verbs:
- create
2022-12-20 08:01:25 +00:00
- apiGroups:
- coordination.k8s.io
resources:
- leases
resourceNames:
- ingress-nginx-leader
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
2022-05-02 17:36:04 +00:00
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
2022-12-20 08:01:25 +00:00
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get