config/components/rbac/kustomization.yaml (24 lines of code) (raw):
resources:
# All RBAC will be applied under this service account in
# the deployment namespace. You may comment out this resource
# if your manager will use a service account that exists at
# runtime. Be sure to update RoleBinding and ClusterRoleBinding
# subjects if changing service account names.
- service_account.yaml
- role.yaml
- role_binding.yaml
- leader_election_role.yaml
- leader_election_role_binding.yaml
# Comment the following 4 lines if you want to disable
# the auth proxy (https://github.com/brancz/kube-rbac-proxy)
# which protects your /metrics endpoint.
- auth_proxy_service.yaml
- auth_proxy_role.yaml
- auth_proxy_role_binding.yaml
- auth_proxy_client_clusterrole.yaml
# ClusterRoles for Kueue APIs
- batch_admin_role.yaml
- batch_user_role.yaml
- clusterqueue_editor_role.yaml
- clusterqueue_viewer_role.yaml
- job_editor_role.yaml
- job_viewer_role.yaml
- localqueue_editor_role.yaml
- localqueue_viewer_role.yaml
- workload_editor_role.yaml
- workload_viewer_role.yaml
- resourceflavor_editor_role.yaml
- resourceflavor_viewer_role.yaml
- mpijob_editor_role.yaml
- mpijob_viewer_role.yaml