github/open-cluster-management
1
0
Fork 0
mirror of https://github.com/open-cluster-management-io/ocm.git synced 2026-02-14 10:00:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

✨ add contoller to support token infrastructure (#1340)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 5m33s
Post / images (amd64, addon-manager) (push) Failing after 5m56s
Post / images (amd64, placement) (push) Failing after 55s
Post / images (amd64, registration-operator) (push) Failing after 46s
Post / images (amd64, work) (push) Failing after 44s
Post / images (arm64, addon-manager) (push) Failing after 46s
Post / images (arm64, placement) (push) Failing after 44s
Post / images (arm64, registration) (push) Failing after 47s
Post / images (arm64, registration-operator) (push) Failing after 45s
Post / images (amd64, registration) (push) Failing after 5m37s
Post / images (arm64, work) (push) Failing after 46s
Post / image manifest (addon-manager) (push) Has been skipped
Post / image manifest (placement) (push) Has been skipped
Post / image manifest (registration) (push) Has been skipped
Post / image manifest (registration-operator) (push) Has been skipped
Post / image manifest (work) (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 41m15s
Close stale issues and PRs / stale (push) Successful in 7s

Browse Source 
Signed-off-by: Yang Le <yangle@redhat.com>
This commit is contained in:
Yang Le
2026-01-27 21:06:21 +08:00
committed by GitHub
parent 8fd640694e
commit f6dec25bdf
12 changed files with 1644 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
deploy/cluster-manager/chart/cluster-manager/templates/cluster_role.yaml
View File

@@ -9,9 +9,11 @@ rules:
verbs: ["create", "get", "list", "update", "watch", "patch", "delete", "deletecollection"]
- apiGroups: [""]
resources: ["serviceaccounts/token"]
resourceNames:
- "agent-registration-bootstrap"
verbs: ["get", "create"]
verbs: ["create"]
# Allow gRPC client to connect to the gRPC server on hub
- apiGroups: [""]
resources: ["serviceaccounts/token"]
verbs: ["subscribe"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["get"]

8
deploy/cluster-manager/config/rbac/cluster_role.yaml
View File

@@ -11,9 +11,11 @@ rules:
verbs: ["create", "get", "list", "update", "watch", "patch", "delete", "deletecollection"]
- apiGroups: [""]
resources: ["serviceaccounts/token"]
resourceNames:
- "agent-registration-bootstrap"
verbs: ["get", "create"]
verbs: ["create"]
# Allow gRPC client to connect to the gRPC server on hub
- apiGroups: [""]
resources: ["serviceaccounts/token"]
verbs: ["subscribe"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["get"]