cluster-role.yaml 1.3 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980
  1. apiVersion: rbac.authorization.k8s.io/v1
  2. kind: ClusterRole
  3. metadata:
  4. name: cost-model
  5. rules:
  6. - apiGroups:
  7. - ''
  8. resources:
  9. - configmaps
  10. - deployments
  11. - nodes
  12. - pods
  13. - services
  14. - resourcequotas
  15. - replicationcontrollers
  16. - limitranges
  17. - persistentvolumeclaims
  18. - persistentvolumes
  19. - namespaces
  20. - endpoints
  21. verbs:
  22. - get
  23. - list
  24. - watch
  25. - create
  26. - apiGroups:
  27. - extensions
  28. resources:
  29. - daemonsets
  30. - deployments
  31. - replicasets
  32. verbs:
  33. - get
  34. - list
  35. - watch
  36. - apiGroups:
  37. - apps
  38. resources:
  39. - statefulsets
  40. - deployments
  41. - daemonsets
  42. - replicasets
  43. verbs:
  44. - list
  45. - watch
  46. - create
  47. - delete
  48. - apiGroups:
  49. - batch
  50. resources:
  51. - cronjobs
  52. - jobs
  53. verbs:
  54. - get
  55. - list
  56. - watch
  57. - apiGroups:
  58. - autoscaling
  59. resources:
  60. - horizontalpodautoscalers
  61. verbs:
  62. - get
  63. - list
  64. - watch
  65. - apiGroups:
  66. - policy
  67. resources:
  68. - poddisruptionbudgets
  69. verbs:
  70. - get
  71. - list
  72. - watch
  73. - apiGroups:
  74. - storage.k8s.io
  75. resources:
  76. - storageclasses
  77. verbs:
  78. - get
  79. - list
  80. - watch