mirror of
https://github.com/open-cluster-management-io/ocm.git
synced 2026-05-09 02:37:03 +00:00
refine placement permissions
Signed-off-by: Yang Le <yangle@redhat.com>
This commit is contained in:
@@ -17,8 +17,11 @@ rules:
|
||||
verbs: ["get", "list", "watch"]
|
||||
# Allow controller to manage placements/placementdecisions
|
||||
- apiGroups: ["cluster.open-cluster-management.io"]
|
||||
resources: ["placements", "placementdecisions"]
|
||||
verbs: ["get", "list", "watch", "create", "update", "patch"]
|
||||
resources: ["placements"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["cluster.open-cluster-management.io"]
|
||||
resources: ["placementdecisions"]
|
||||
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
|
||||
- apiGroups: ["cluster.open-cluster-management.io"]
|
||||
resources: ["placements/status", "placementdecisions/status"]
|
||||
verbs: ["update", "patch"]
|
||||
|
||||
@@ -1676,8 +1676,11 @@ rules:
|
||||
verbs: ["get", "list", "watch"]
|
||||
# Allow controller to manage placements/placementdecisions
|
||||
- apiGroups: ["cluster.open-cluster-management.io"]
|
||||
resources: ["placements", "placementdecisions"]
|
||||
verbs: ["get", "list", "watch", "create", "update", "patch"]
|
||||
resources: ["placements"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["cluster.open-cluster-management.io"]
|
||||
resources: ["placementdecisions"]
|
||||
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
|
||||
- apiGroups: ["cluster.open-cluster-management.io"]
|
||||
resources: ["placements/status", "placementdecisions/status"]
|
||||
verbs: ["update", "patch"]
|
||||
|
||||
Reference in New Issue
Block a user