Grant nerc-ops read access to all operators.coreos.com objects (#656)

OCP-on-NERC · Feb 14, 2025 · 8eefaba · 8eefaba
1 parent 49ced37
commit 8eefaba
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 0 deletions.
diff --git a/...ter-scope/base/rbac.authorization.k8s.io/clusterroles/nerc-ops-operators/clusterrole.yaml b/...ter-scope/base/rbac.authorization.k8s.io/clusterroles/nerc-ops-operators/clusterrole.yaml
@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    nerc.mghpcc.org/aggregate-to-nerc-ops: "true"
+  name: nerc-ops-operators
+rules:
+  - apiGroups:
+      - "operators.coreos.com"
+    resources:
+      - "*"
+    verbs:
+      - list
+      - get
+      - watch
diff --git a/...r-scope/base/rbac.authorization.k8s.io/clusterroles/nerc-ops-operators/kustomization.yaml b/...r-scope/base/rbac.authorization.k8s.io/clusterroles/nerc-ops-operators/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+    - clusterrole.yaml
diff --git a/cluster-scope/bundles/nerc-ops-rbac/kustomization.yaml b/cluster-scope/bundles/nerc-ops-rbac/kustomization.yaml
@@ -13,3 +13,4 @@ resources:
 - ../../base/rbac.authorization.k8s.io/clusterroles/nerc-ops-monitoring
 - ../../base/rbac.authorization.k8s.io/clusterroles/nerc-ops-machineconfig
 - ../../base/rbac.authorization.k8s.io/clusterroles/nerc-ops-rhoai
+- ../../base/rbac.authorization.k8s.io/clusterroles/nerc-ops-operators