Skip to content
This repository has been archived by the owner on Jul 30, 2021. It is now read-only.

Commit

Permalink
add expanded cluster-reader role rules
Browse files Browse the repository at this point in the history
This is what I did to get the list of `cluster-reader` rules
to add to the `clusterPermissions`:

- on a current cluster, `oc get clusterrole cluster-reader -o yaml`
- edit the file so that it contained just the list of rules
- run through a python script to "de-dup" the rules

For example, change this:

```yaml
        - apiGroups:
          - ""
          - route.openshift.io
          resources:
          - routes/status
          verbs:
          - get
          - list
          - watch
        - apiGroups:
          - ""
          - route.openshift.io
          resources:
          - routes
          verbs:
          - get
          - list
          - watch
```

to this

```
        - apiGroups:
          - ""
          - route.openshift.io
          resources:
          - routes
          - routes/status
          verbs:
          - get
          - list
          - watch
```

There were several such cases in the cluster-reader role definition.
  • Loading branch information
richm committed Feb 27, 2019
1 parent f454f62 commit 13e38a5
Showing 1 changed file with 489 additions and 0 deletions.
Loading

0 comments on commit 13e38a5

Please sign in to comment.