Skip to content

Commit

Permalink
feat(module): fix roles
Browse files Browse the repository at this point in the history
Signed-off-by: Pavel Tishkov <[email protected]>
  • Loading branch information
fl64 committed Nov 29, 2024
1 parent d7d47ee commit 54bd937
Show file tree
Hide file tree
Showing 9 changed files with 8 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ metadata:
rbac.deckhouse.io/kind: manage
rbac.deckhouse.io/level: module
rbac.deckhouse.io/namespace: d8-virtualization
name: d8:manage:capability:virtualization:manage_internals
name: d8:manage:permission:virtualization:manage_internals
rules:
- apiGroups:
- cdi.internal.virtualization.deckhouse.io
Expand Down
File renamed without changes.
2 changes: 1 addition & 1 deletion templates/rbacv2/manage/roles/manager.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ metadata:
rbac.deckhouse.io/kind: manage
rbac.deckhouse.io/level: subsystem
rbac.deckhouse.io/subsystem: virtualization
#rbac.deckhouse.io/aggregate-to-virtualization-as: disaster-admin
rbac.deckhouse.io/aggregate-to-virtualization-as: super-admin
rbac.deckhouse.io/aggregate-to-all-as: manager
aggregationRule:
clusterRoleSelectors:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ metadata:
heritage: deckhouse
module: virtualization
rbac.deckhouse.io/aggregate-to-all-as: admin
rbac.deckhouse.io/aggregate-to-virtualization-as: super-admin
rbac.deckhouse.io/kind: use
aggregationRule:
clusterRoleSelectors:
Expand Down
File renamed without changes.
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,9 @@ metadata:
rbac.deckhouse.io/aggregate-to-role: super-admin
rbac.deckhouse.io/kind: use
name: d8:use:virtualization:super-admin
aggregationRule:
clusterRoleSelectors:
- matchLabels:
rbac.deckhouse.io/kind: use
rbac.deckhouse.io/aggregate-to-virtualization-as: super-admin
rules: []
File renamed without changes.
File renamed without changes.

0 comments on commit 54bd937

Please sign in to comment.