clusterRoles - Code Search

api/discovery/aggregated_v2.json

              ]
            },
            {
              "resource": "clusterroles",
              "responseKind": {
                "group": "",
                "kind": "ClusterRole",
                "version": ""
              },
              "scope": "Cluster",
              "singularResource": "clusterrole",
              "verbs": [
                "create",
                "delete",

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Tue Mar 12 17:29:14 UTC 2024

- 55.4K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/precheck/precheck.go

		version   string
		resource  string
	}{
		{
			version:  "v1",
			resource: "namespaces",
		},
		{
			group:    "rbac.authorization.k8s.io",
			version:  "v1",
			resource: "clusterroles",
		},
		{
			group:    "rbac.authorization.k8s.io",
			version:  "v1",
			resource: "clusterrolebindings",
		},
		{
			group:    "apiextensions.k8s.io",
			version:  "v1",

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Apr 12 02:57:30 UTC 2024

- 19.3K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

api/openapi-spec/v3/apisrbac.authorization.k8s.iov1_openapi.json

        "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
        "properties": {
          "clusterRoleSelectors": {
            "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added",
            "items": {
              "allOf": [

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Fri Mar 08 04:18:56 UTC 2024

- 352.2K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-cni/templates/clusterrole.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: {{ template "name" . }}
  labels:
    app: {{ template "name" . }}
    release: {{ .Release.Name }}
    istio.io/rev: {{ .Values.revision | default "default" }}
    install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    operator.istio.io/component: "Cni"
rules:
- apiGroups: [""]
  resources: ["pods","nodes","namespaces"]

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri May 17 21:52:29 UTC 2024

- 2.3K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/templates/clusterrole.yaml

{{- if .Values.global.configCluster }}
{{ $mcsAPIGroup := or .Values.pilot.env.MCS_API_GROUP "multicluster.x-k8s.io" }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: istiod-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
  labels:
    app: istiod
    release: {{ .Release.Name }}
rules:
  # sidecar injection controller
  - apiGroups: ["admissionregistration.k8s.io"]

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Apr 12 16:44:32 UTC 2024

- 5.8K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/templates/clusterrole.yaml

{{ $mcsAPIGroup := or .Values.pilot.env.MCS_API_GROUP "multicluster.x-k8s.io" }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: istiod-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
  labels:
    app: istiod
    release: {{ .Release.Name }}
rules:
  # sidecar injection controller
  - apiGroups: ["admissionregistration.k8s.io"]

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Apr 12 16:44:32 UTC 2024

- 5.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/templates/reader-clusterrole.yaml

{{ $mcsAPIGroup := or .Values.pilot.env.MCS_API_GROUP "multicluster.x-k8s.io" }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: istio-reader-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
  labels:
    app: istio-reader
    release: {{ .Release.Name }}
rules:
  - apiGroups:
      - "config.istio.io"
      - "security.istio.io"
      - "networking.istio.io"

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Apr 02 08:32:06 UTC 2024

- 2.2K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/templates/reader-clusterrole.yaml

{{ $mcsAPIGroup := or .Values.pilot.env.MCS_API_GROUP "multicluster.x-k8s.io" }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: istio-reader-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
  labels:
    app: istio-reader
    release: {{ .Release.Name }}
rules:
  - apiGroups:
      - "config.istio.io"
      - "security.istio.io"
      - "networking.istio.io"

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Apr 02 08:32:06 UTC 2024

- 2.2K bytes

- Viewed (0)

github.com/istio/istio

releasenotes/notes/limit-csr-clusterrole.yaml

apiVersion: release-notes/v2
kind: feature
area: installation
releaseNotes:
  - |
    **Added** check to limit the clusterrole for k8s CSR permissions for

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Mar 21 19:34:22 UTC 2023

- 272 bytes

- Viewed (0)

github.com/kubernetes/kubernetes

cluster/addons/calico-policy-controller/calico-cpva-clusterrole.yaml

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: calico-cpva
  labels:
    addonmanager.kubernetes.io/mode: Reconcile
rules:
  - apiGroups: [""]
    resources: ["nodes"]
    verbs: ["list"]
  - apiGroups: ["apps"]
    resources: ["deployments", "daemonsets"]

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Fri Dec 13 17:23:39 UTC 2019

- 308 bytes

- Viewed (0)

Search Options