068afe5bb9
The auth service (Dex) does not depend on the SIP scheduling output like the other services do, so it can be put in place independet of SIP. This will remove complexity from SIP and give more flexibility in how we deploy Dex through kustomize. Change-Id: I1f871ae3be7d228cef867af6bed8ffffd6d0ea56
82 lines
1018 B
YAML
82 lines
1018 B
YAML
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: scheduler-role
|
|
namespace: metal3
|
|
rules:
|
|
- apiGroups:
|
|
- metal3.io
|
|
resources:
|
|
- baremetalhosts
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- watch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
- apps
|
|
resources:
|
|
- secrets
|
|
- deployments
|
|
verbs:
|
|
- get
|
|
- list
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: cluster-scheduler-role
|
|
rules:
|
|
- apiGroups:
|
|
- metal3.io
|
|
resources:
|
|
- baremetalhosts
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- watch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- update
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: sipcluster-infra-service
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
- apps
|
|
resources:
|
|
- configmaps
|
|
- deployments
|
|
- services
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- update
|
|
- get
|
|
- list
|
|
- watch
|