added dmm rbac roles

Signed-off-by: Blake Devcich <[email protected]>
NearNodeFlash · Nov 8, 2023 · c0a4378 · c0a4378
1 parent 04ef9db
commit c0a4378
Show file tree

Hide file tree

Showing 2 changed files with 44 additions and 0 deletions.
diff --git a/config/rbac/datamovementmanager_editor_role.yaml b/config/rbac/datamovementmanager_editor_role.yaml
@@ -0,0 +1,24 @@
+# permissions for end users to edit datamovementmanagers.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: datamovementmanager-editor-role
+rules:
+- apiGroups:
+  - dm.cray.hpe.com
+  resources:
+  - datamovementmanagers
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - dm.cray.hpe.com
+  resources:
+  - datamovementmanagers/status
+  verbs:
+  - get
diff --git a/config/rbac/datamovementmanager_viewer_role.yaml b/config/rbac/datamovementmanager_viewer_role.yaml
@@ -0,0 +1,20 @@
+# permissions for end users to view datamovementmanagers.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: datamovementmanager-viewer-role
+rules:
+- apiGroups:
+  - dm.cray.hpe.com
+  resources:
+  - datamovementmanagers
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - dm.cray.hpe.com
+  resources:
+  - datamovementmanagers/status
+  verbs:
+  - get