Fix #1107: update helm roles

apache · Jan 12, 2022 · 8a4f660 · 8a4f660
1 parent e5354e5
commit 8a4f660
Showing 1 changed file with 143 additions and 62 deletions.
diff --git a/helm/camel-k/templates/operator-role.yaml b/helm/camel-k/templates/operator-role.yaml
@@ -26,9 +26,40 @@ rules:
 - apiGroups:
   - camel.apache.org
   resources:
-  - "*"
+  - builds
+  - camelcatalogs
+  - integrationkits
+  - integrationplatforms
+  - integrations
+  - kameletbindings
+  - kamelets
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - camel.apache.org
+  resources:
+  - builds
+  verbs:
+  - delete
+- apiGroups:
+  - camel.apache.org
+  resources:
+  - builds/status
+  - camelcatalogs/status
+  - integrationkits/status
+  - integrationplatforms/status
+  - integrations/status
+  - kameletbindings/status
+  - kamelets/status
   verbs:
-  - "*"
+  - get
+  - patch
+  - update
 - apiGroups:
   - ""
   resources:
@@ -87,21 +118,22 @@ rules:
   - update
   - watch
 - apiGroups:
-  - ""
+  - apps
   resources:
-  - events
+  - deployments
   verbs:
   - create
-  - patch
+  - delete
+  - deletecollection
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
-  - apps
+  - batch
   resources:
-  - deployments
-  - replicasets
-  - statefulsets
+  - cronjobs
   verbs:
   - create
   - delete
@@ -114,7 +146,15 @@ rules:
 - apiGroups:
   - batch
   resources:
-  - cronjobs
+  - jobs
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - ingresses
   verbs:
   - create
   - delete
@@ -125,17 +165,20 @@ rules:
   - update
   - watch
 - apiGroups:
-  - apps
+  - ""
   resources:
-  - daemonsets
+  - events
   verbs:
+  - create
+  - patch
   - get
   - list
   - watch
 - apiGroups:
-  - extensions
+  - keda.sh
   resources:
-  - networking.k8s.io
+  - scaledobjects
+  - triggerauthentications
   verbs:
   - create
   - delete
@@ -146,53 +189,67 @@ rules:
   - update
   - watch
 - apiGroups:
-  - ""
-  - "build.openshift.io"
+  - serving.knative.dev
   resources:
-  - buildconfigs
-  - buildconfigs/webhooks
-  - builds
+  - services
   verbs:
   - create
   - delete
-  - deletecollection
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - ""
-  - "image.openshift.io"
+  - eventing.knative.dev
   resources:
-  - imagestreamimages
-  - imagestreammappings
-  - imagestreams
-  - imagestreams/secrets
-  - imagestreamtags
+  - triggers
   verbs:
   - create
   - delete
-  - deletecollection
   - get
   - list
   - patch
   - update
-  - watch
 - apiGroups:
-  - ""
-  - build.openshift.io
+  - messaging.knative.dev
   resources:
-  - buildconfigs/instantiate
-  - buildconfigs/instantiatebinary
-  - builds/clone
+  - subscriptions
   verbs:
   - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
 - apiGroups:
-  - ""
-  - "route.openshift.io"
+  - sources.knative.dev
   resources:
-  - routes
+  - sinkbindings
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+- apiGroups:
+  - eventing.knative.dev
+  resources:
+  - brokers
+  verbs:
+  - get
+- apiGroups:
+  - messaging.knative.dev
+  resources:
+  - channels
+  - inmemorychannels
+  verbs:
+  - get
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
   verbs:
   - create
   - delete
@@ -203,16 +260,22 @@ rules:
   - update
   - watch
 - apiGroups:
-  - ""
-  - route.openshift.io
+  - camel.apache.org
   resources:
-  - routes/custom-host
+  - builds/finalizers
+  - integrationkits/finalizers
+  - integrationplatforms/finalizers
+  - integrations/finalizers
+  - kameletbindings/finalizers
   verbs:
-  - create
+  - update
 - apiGroups:
-  - serving.knative.dev
+  - ""
+  - build.openshift.io
   resources:
-  - services
+  - buildconfigs
+  - buildconfigs/webhooks
+  - builds
   verbs:
   - create
   - delete
@@ -223,11 +286,14 @@ rules:
   - update
   - watch
 - apiGroups:
-  - eventing.knative.dev
-  - messaging.knative.dev
-  - sources.knative.dev
+  - ""
+  - image.openshift.io
   resources:
-  - "*"
+  - imagestreamimages
+  - imagestreammappings
+  - imagestreams
+  - imagestreams/secrets
+  - imagestreamtags
   verbs:
   - create
   - delete
@@ -238,17 +304,19 @@ rules:
   - update
   - watch
 - apiGroups:
-  - rbac.authorization.k8s.io
+  - ""
+  - build.openshift.io
   resources:
-  - clusterroles
+  - buildconfigs/instantiate
+  - buildconfigs/instantiatebinary
+  - builds/clone
   verbs:
-  - bind
-  resourceNames:
-  - system:image-builder
+  - create
 - apiGroups:
-  - monitoring.coreos.com
+  - ""
+  - route.openshift.io
   resources:
-  - podmonitors
+  - routes
   verbs:
   - create
   - delete
@@ -259,18 +327,16 @@ rules:
   - update
   - watch
 - apiGroups:
-  - "kafka.strimzi.io"
+  - ""
+  - route.openshift.io
   resources:
-  - kafkatopics
-  - kafkas
+  - routes/custom-host
   verbs:
-  - get
-  - list
-  - watch
+  - create
 - apiGroups:
-  - "coordination.k8s.io"
+  - monitoring.coreos.com
   resources:
-  - leases
+  - podmonitors
   verbs:
   - create
   - delete
@@ -280,9 +346,24 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - kafka.strimzi.io
+  resources:
+  - kafkatopics
+  - kafkas
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - "apiextensions.k8s.io"
   resources:
   - customresourcedefinitions
   verbs:
   - get
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  verbs:
+  - bind