Skip to content

Commit 7676a19

Browse files
filariowfilariow
committed
add konflux-viewer-user-actions role to stg and prod
Add the konflux-viewer-user-actions role. It provides the same rights konflux-contributor-user-actions role provides. It is required for Public view implementation. Signed-off-by: Francesco Ilario <[email protected]>
1 parent cb0114e commit 7676a19

File tree

4 files changed

+256
-0
lines changed

4 files changed

+256
-0
lines changed

‎components/konflux-rbac/production/base/konflux-viewer-user-actions.yaml‎

Lines changed: 127 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,127 @@
1+
---
2+
kind: ClusterRole
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
metadata:
5+
name: konflux-viewer-user-actions
6+
labels:
7+
konflux-cluster-role: "true"
8+
rules:
9+
- verbs:
10+
- get
11+
- list
12+
- watch
13+
apiGroups:
14+
- appstudio.redhat.com
15+
resources:
16+
- applications
17+
- components
18+
- imagerepositories
19+
- verbs:
20+
- get
21+
- list
22+
- watch
23+
apiGroups:
24+
- appstudio.redhat.com
25+
resources:
26+
- snapshots
27+
- verbs:
28+
- get
29+
- list
30+
- watch
31+
apiGroups:
32+
- tekton.dev
33+
resources:
34+
- pipelineruns
35+
- taskruns
36+
- verbs:
37+
- get
38+
- list
39+
apiGroups:
40+
- results.tekton.dev
41+
resources:
42+
- results
43+
- records
44+
- logs
45+
- verbs:
46+
- get
47+
- list
48+
- watch
49+
apiGroups:
50+
- appstudio.redhat.com
51+
resources:
52+
- integrationtestscenarios
53+
- verbs:
54+
- get
55+
- list
56+
- watch
57+
apiGroups:
58+
- appstudio.redhat.com
59+
resources:
60+
- enterprisecontractpolicies
61+
- verbs:
62+
- get
63+
- list
64+
- watch
65+
apiGroups:
66+
- appstudio.redhat.com
67+
resources:
68+
- releases
69+
- releaseplans
70+
- verbs:
71+
- get
72+
- list
73+
- watch
74+
apiGroups:
75+
- appstudio.redhat.com
76+
resources:
77+
- releaseplanadmissions
78+
- verbs:
79+
- get
80+
- list
81+
- watch
82+
apiGroups:
83+
- jvmbuildservice.io
84+
resources:
85+
- jbsconfigs
86+
- artifactbuilds
87+
- verbs:
88+
- get
89+
- list
90+
- watch
91+
apiGroups:
92+
- ''
93+
resources:
94+
- configmaps
95+
- pods
96+
- pods/log
97+
- verbs:
98+
- get
99+
- list
100+
- watch
101+
apiGroups:
102+
- projctl.konflux.dev
103+
resources:
104+
- projects
105+
- projectdevelopmentstreams
106+
- projectdevelopmentstreamtemplates
107+
- verbs:
108+
- get
109+
apiGroups:
110+
- ''
111+
resources:
112+
- namespaces
113+
- verbs:
114+
- get
115+
apiGroups:
116+
- project.openshift.io
117+
resources:
118+
- projects
119+
- verbs:
120+
- get
121+
- list
122+
- watch
123+
apiGroups:
124+
- batch
125+
resources:
126+
- cronjobs
127+
- jobs

‎components/konflux-rbac/production/base/kustomization.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,5 @@ resources:
44
- konflux-admin-user-actions.yaml
55
- konflux-maintainer-user-actions.yaml
66
- konflux-contributor-user-actions.yaml
7+
- konflux-viewer-user-actions.yaml
78
- ../../policies/bootstrap-tenant-namespace/

‎components/konflux-rbac/staging/base/konflux-viewer-user-actions.yaml‎

Lines changed: 127 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,127 @@
1+
---
2+
kind: ClusterRole
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
metadata:
5+
name: konflux-viewer-user-actions
6+
labels:
7+
konflux-cluster-role: "true"
8+
rules:
9+
- verbs:
10+
- get
11+
- list
12+
- watch
13+
apiGroups:
14+
- appstudio.redhat.com
15+
resources:
16+
- applications
17+
- components
18+
- imagerepositories
19+
- verbs:
20+
- get
21+
- list
22+
- watch
23+
apiGroups:
24+
- appstudio.redhat.com
25+
resources:
26+
- snapshots
27+
- verbs:
28+
- get
29+
- list
30+
- watch
31+
apiGroups:
32+
- tekton.dev
33+
resources:
34+
- pipelineruns
35+
- taskruns
36+
- verbs:
37+
- get
38+
- list
39+
apiGroups:
40+
- results.tekton.dev
41+
resources:
42+
- results
43+
- records
44+
- logs
45+
- verbs:
46+
- get
47+
- list
48+
- watch
49+
apiGroups:
50+
- appstudio.redhat.com
51+
resources:
52+
- integrationtestscenarios
53+
- verbs:
54+
- get
55+
- list
56+
- watch
57+
apiGroups:
58+
- appstudio.redhat.com
59+
resources:
60+
- enterprisecontractpolicies
61+
- verbs:
62+
- get
63+
- list
64+
- watch
65+
apiGroups:
66+
- appstudio.redhat.com
67+
resources:
68+
- releases
69+
- releaseplans
70+
- verbs:
71+
- get
72+
- list
73+
- watch
74+
apiGroups:
75+
- appstudio.redhat.com
76+
resources:
77+
- releaseplanadmissions
78+
- verbs:
79+
- get
80+
- list
81+
- watch
82+
apiGroups:
83+
- jvmbuildservice.io
84+
resources:
85+
- jbsconfigs
86+
- artifactbuilds
87+
- verbs:
88+
- get
89+
- list
90+
- watch
91+
apiGroups:
92+
- ''
93+
resources:
94+
- configmaps
95+
- pods
96+
- pods/log
97+
- verbs:
98+
- get
99+
- list
100+
- watch
101+
apiGroups:
102+
- projctl.konflux.dev
103+
resources:
104+
- projects
105+
- projectdevelopmentstreams
106+
- projectdevelopmentstreamtemplates
107+
- verbs:
108+
- get
109+
apiGroups:
110+
- ''
111+
resources:
112+
- namespaces
113+
- verbs:
114+
- get
115+
apiGroups:
116+
- project.openshift.io
117+
resources:
118+
- projects
119+
- verbs:
120+
- get
121+
- list
122+
- watch
123+
apiGroups:
124+
- batch
125+
resources:
126+
- cronjobs
127+
- jobs

‎components/konflux-rbac/staging/base/kustomization.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,5 @@ resources:
44
- konflux-admin-user-actions.yaml
55
- konflux-maintainer-user-actions.yaml
66
- konflux-contributor-user-actions.yaml
7+
- konflux-viewer-user-actions.yaml
78
- ../../policies/bootstrap-tenant-namespace/

0 commit comments

Comments
 (0)