fix(rbac): authorization:namespace:owner ns owner not to remove cluster resources

!6
This commit is contained in:
2023-11-04 18:26:25 +09:30
parent 9936cd4499
commit 6ab17bdc3c

View File

@ -90,16 +90,14 @@ metadata:
app.kubernetes.io/version: '' app.kubernetes.io/version: ''
name: authorization:namespace:owner name: authorization:namespace:owner
rules: rules:
- apiGroups: # Read-only access to resrouces - apiGroups: # Read-Write access to resrouces
- "*" - "*"
resources: resources:
- awx
- cronjobs - cronjobs
- daemonset - daemonset
- deployments - deployments
- helmcharts - helmcharts
- helmchartconfigs - helmchartconfigs
- ingress
- jobs - jobs
- pods - pods
- pvc - pvc
@ -109,7 +107,6 @@ rules:
- serviceaccount - serviceaccount
- services - services
- statefuleset - statefuleset
- storageclasses
- configmap - configmap
verbs: verbs:
- create - create
@ -117,6 +114,23 @@ rules:
- list - list
- watch - watch
- delete - delete
- apiGroups: # Read-Remove access
- "*"
resources:
- ingress
verbs:
- get
- list
- watch
- delete
- apiGroups: # Read access
- "*"
resources:
- storageclasses
verbs:
- get
- list
- watch
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1