refine placement permissions

Signed-off-by: Yang Le <yangle@redhat.com>
This commit is contained in:
Yang Le
2021-07-27 10:57:14 +08:00
parent 471cda573a
commit d84378e430
2 changed files with 10 additions and 4 deletions

View File

@@ -17,8 +17,11 @@ rules:
verbs: ["get", "list", "watch"]
# Allow controller to manage placements/placementdecisions
- apiGroups: ["cluster.open-cluster-management.io"]
resources: ["placements", "placementdecisions"]
verbs: ["get", "list", "watch", "create", "update", "patch"]
resources: ["placements"]
verbs: ["get", "list", "watch"]
- apiGroups: ["cluster.open-cluster-management.io"]
resources: ["placementdecisions"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: ["cluster.open-cluster-management.io"]
resources: ["placements/status", "placementdecisions/status"]
verbs: ["update", "patch"]

View File

@@ -1676,8 +1676,11 @@ rules:
verbs: ["get", "list", "watch"]
# Allow controller to manage placements/placementdecisions
- apiGroups: ["cluster.open-cluster-management.io"]
resources: ["placements", "placementdecisions"]
verbs: ["get", "list", "watch", "create", "update", "patch"]
resources: ["placements"]
verbs: ["get", "list", "watch"]
- apiGroups: ["cluster.open-cluster-management.io"]
resources: ["placementdecisions"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: ["cluster.open-cluster-management.io"]
resources: ["placements/status", "placementdecisions/status"]
verbs: ["update", "patch"]