Merge pull request #1399 from eumel8/feat/userroles

add aggregated ClusterRole to manage namespaced resources
kube-logging · Jul 31, 2023 · 5a8e76e · 5a8e76e
2 parents 6e8647b + 97dc056
commit 5a8e76e
Showing 1 changed file with 39 additions and 0 deletions.
diff --git a/charts/logging-operator/templates/userrole.yaml b/charts/logging-operator/templates/userrole.yaml
@@ -0,0 +1,39 @@
+{{- if .Values.rbac.enabled }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ template "logging-operator.fullname" . }}-edit
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+- apiGroups:
+  - logging.banzaicloud.io
+  resources:
+  - flows
+  - outputs
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - logging.banzaicloud.io
+  resources:
+  - syslogngflows
+  - syslogngoutputs
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
+{{- end }}