vault-secrets-operator/config/rbac/role.yaml at 96899ff56071750e0f4d9d19ffa82f18ef6bdd22 · hashicorp/vault-secrets-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: manager-role
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - serviceaccounts
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - ""
  resources:
  - secrets
  verbs:
  - create
  - delete
  - deletecollection
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - ""
  resources:
  - serviceaccounts/token
  verbs:
  - create
  - get
  - list
  - watch
- apiGroups:
  - apps
  resources:
  - daemonsets
  - deployments
  - statefulsets
  verbs:
  - get
  - list
  - patch
  - watch
- apiGroups:
  - argoproj.io
  resources:
  - rollouts
  verbs:
  - get
  - list
  - patch
  - watch
- apiGroups:
  - kafka.strimzi.io
  resources:
  - kafkaconnects
  verbs:
  - get
  - list
  - patch
  - watch
- apiGroups:
  - secrets.hashicorp.com
  resources:
  - csisecrets
  - hcpauths
  - hcpvaultsecretsapps
  - secrettransformations
  - vaultauthglobals
  - vaultauths
  - vaultconnections
  - vaultdynamicsecrets
  - vaultpkisecrets
  - vaultstaticsecrets
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - secrets.hashicorp.com
  resources:
  - csisecrets/finalizers
  - hcpauths/finalizers
  - hcpvaultsecretsapps/finalizers
  - secrettransformations/finalizers
  - vaultauthglobals/finalizers
  - vaultauths/finalizers
  - vaultconnections/finalizers
  - vaultdynamicsecrets/finalizers
  - vaultpkisecrets/finalizers
  - vaultstaticsecrets/finalizers
  verbs:
  - update
- apiGroups:
  - secrets.hashicorp.com
  resources:
  - csisecrets/status
  - hcpauths/status
  - hcpvaultsecretsapps/status
  - secrettransformations/status
  - vaultauthglobals/status
  - vaultauths/status
  - vaultconnections/status
  - vaultdynamicsecrets/status
  - vaultpkisecrets/status
  - vaultstaticsecrets/status
  verbs:
  - get
  - patch
  - update