feat(module): fix roles #2

Signed-off-by: Pavel Tishkov <[email protected]>
deckhouse · Nov 29, 2024 · e4fbd6f · e4fbd6f
1 parent 54bd937
commit e4fbd6f
Show file tree

Hide file tree

Showing 11 changed files with 3 additions and 122 deletions.
diff --git a/docs.yaml b/docs.yaml
diff --git a/rbac.yaml b/rbac.yaml
diff --git a/templates/rbacv2/manage/permissions/manage_internals.yaml b/templates/rbacv2/manage/permissions/manage_internals.yaml
@@ -1,15 +1,14 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization
     rbac.deckhouse.io/aggregate-to-virtualization-as: super-admin
     rbac.deckhouse.io/kind: manage
     rbac.deckhouse.io/level: module
     rbac.deckhouse.io/namespace: d8-virtualization
-  name: d8:manage:permission:virtualization:manage_internals
+  name: d8:manage:permission:subsystem:virtualization:manage_internals
 rules:
 - apiGroups:
   - cdi.internal.virtualization.deckhouse.io

diff --git a/templates/rbacv2/manage/permissions/manage_resources.yaml b/templates/rbacv2/manage/permissions/manage_resources.yaml
@@ -1,15 +1,14 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization
     rbac.deckhouse.io/aggregate-to-virtualization-as: manager
     rbac.deckhouse.io/kind: manage
     rbac.deckhouse.io/level: module
     rbac.deckhouse.io/namespace: d8-virtualization
-  name: d8:manage:permission:virtualization:manage_resources
+  name: d8:manage:permission:subsystem:virtualization:manage_resources
 rules:
 - apiGroups:
   - virtualization.deckhouse.io

diff --git a/templates/rbacv2/manage/permissions/view_resources.yaml b/templates/rbacv2/manage/permissions/view_resources.yaml
@@ -1,15 +1,14 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization
     rbac.deckhouse.io/aggregate-to-virtualization-as: viewer
     rbac.deckhouse.io/kind: manage
     rbac.deckhouse.io/level: module
     rbac.deckhouse.io/namespace: d8-virtualization
-  name: d8:manage:permission:virtualization:view_resources
+  name: d8:manage:permission:subsystem:virtualization:view_resources
 rules:
 - apiGroups:
   - virtualization.deckhouse.io

diff --git a/templates/rbacv2/use/capabilities/access_console.yaml b/templates/rbacv2/use/capabilities/access_console.yaml
@@ -1,7 +1,6 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization

diff --git a/templates/rbacv2/use/capabilities/execute_virtualmachine_operations.yaml b/templates/rbacv2/use/capabilities/execute_virtualmachine_operations.yaml
@@ -1,7 +1,6 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization

diff --git a/templates/rbacv2/use/capabilities/forward_port.yaml b/templates/rbacv2/use/capabilities/forward_port.yaml
@@ -1,7 +1,6 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization

diff --git a/templates/rbacv2/use/capabilities/manage_internals.yaml b/templates/rbacv2/use/capabilities/manage_internals.yaml
@@ -1,11 +1,9 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization
-    # TODO
     rbac.deckhouse.io/aggregate-to-virtualization-as: super-admin
     rbac.deckhouse.io/kind: use
   name: d8:use:capability:virtualization:manage_internals

diff --git a/templates/rbacv2/use/capabilities/manage_resources.yaml b/templates/rbacv2/use/capabilities/manage_resources.yaml
@@ -1,7 +1,6 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization

diff --git a/templates/rbacv2/use/capabilities/view_resources.yaml b/templates/rbacv2/use/capabilities/view_resources.yaml
@@ -1,7 +1,6 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   labels:
     heritage: deckhouse
     module: virtualization