Files
infrastructure/clusters/cl01tl/manifests/intel-device-plugin/ClusterRole-inteldeviceplugins-manager-role.yml

133 lines
2.5 KiB
YAML

---
# Source: intel-device-plugin/charts/intel-device-plugins-operator/templates/operator.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
creationTimestamp: null
name: inteldeviceplugins-manager-role
rules:
- apiGroups:
- ""
resources:
- nodes/proxy
verbs:
- get
- list
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- serviceaccounts
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- apps
resources:
- daemonsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- coordination.k8s.io
resourceNames:
- d1c7b6d5.intel.com
resources:
- leases
verbs:
- get
- update
- apiGroups:
- deviceplugin.intel.com
resources:
- dlbdeviceplugins
- dsadeviceplugins
- fpgadeviceplugins
- gpudeviceplugins
- iaadeviceplugins
- npudeviceplugins
- qatdeviceplugins
- sgxdeviceplugins
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- deviceplugin.intel.com
resources:
- dlbdeviceplugins/finalizers
- dsadeviceplugins/finalizers
- fpgadeviceplugins/finalizers
- gpudeviceplugins/finalizers
- iaadeviceplugins/finalizers
- qatdeviceplugins/finalizers
- sgxdeviceplugins/finalizers
verbs:
- update
- apiGroups:
- deviceplugin.intel.com
resources:
- dlbdeviceplugins/status
- dsadeviceplugins/status
- fpgadeviceplugins/status
- gpudeviceplugins/status
- iaadeviceplugins/status
- qatdeviceplugins/status
- sgxdeviceplugins/status
verbs:
- get
- patch
- update
- apiGroups:
- fpga.intel.com
resources:
- acceleratorfunctions
- fpgaregions
verbs:
- get
- list
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterrolebindings
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- security.openshift.io
resourceNames:
- privileged
resources:
- securitycontextconstraints
verbs:
- use