config/components/rbac/role.yaml (227 lines of code) (raw):

--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: manager-role rules: - apiGroups: - "" resources: - events verbs: - create - patch - update - watch - apiGroups: - "" resources: - limitranges verbs: - get - list - watch - apiGroups: - "" resources: - namespaces verbs: - get - list - watch - apiGroups: - "" resources: - secrets verbs: - get - list - update - watch - apiGroups: - admissionregistration.k8s.io resources: - mutatingwebhookconfigurations verbs: - get - list - update - watch - apiGroups: - admissionregistration.k8s.io resources: - validatingwebhookconfigurations verbs: - get - list - update - watch - apiGroups: - batch resources: - jobs verbs: - get - list - patch - update - watch - apiGroups: - batch resources: - jobs/finalizers verbs: - get - patch - update - apiGroups: - batch resources: - jobs/status verbs: - get - update - apiGroups: - kubeflow.org resources: - mpijobs verbs: - get - list - patch - update - watch - apiGroups: - kubeflow.org resources: - mpijobs/status verbs: - get - update - apiGroups: - kueue.x-k8s.io resources: - clusterqueues verbs: - create - delete - get - list - patch - update - watch - apiGroups: - kueue.x-k8s.io resources: - clusterqueues/finalizers verbs: - update - apiGroups: - kueue.x-k8s.io resources: - clusterqueues/status verbs: - get - patch - update - apiGroups: - kueue.x-k8s.io resources: - localqueues verbs: - create - delete - get - list - patch - update - watch - apiGroups: - kueue.x-k8s.io resources: - localqueues/finalizers verbs: - update - apiGroups: - kueue.x-k8s.io resources: - localqueues/status verbs: - get - patch - update - apiGroups: - kueue.x-k8s.io resources: - resourceflavors verbs: - delete - get - list - update - watch - apiGroups: - kueue.x-k8s.io resources: - resourceflavors/finalizers verbs: - update - apiGroups: - kueue.x-k8s.io resources: - workloads verbs: - create - delete - get - list - patch - update - watch - apiGroups: - kueue.x-k8s.io resources: - workloads/finalizers verbs: - update - apiGroups: - kueue.x-k8s.io resources: - workloads/status verbs: - get - patch - update - apiGroups: - node.k8s.io resources: - runtimeclasses verbs: - get - list - watch - apiGroups: - ray.io resources: - rayjobs verbs: - get - list - patch - update - watch - apiGroups: - ray.io resources: - rayjobs/status verbs: - get - update - apiGroups: - scheduling.k8s.io resources: - priorityclasses verbs: - get - list - watch