Add Serverless/Knative CRDs aggregate-to-edit ClusterRole

OCP-on-NERC / nerc-ocp-config

1 stars 16 forks source link

Add Serverless/Knative CRDs aggregate-to-edit ClusterRole #419

Closed computate closed 2 months ago

computate commented 2 months ago

Add Serverless/Knative CRDs aggregate-to-edit ClusterRole Grant Users access to create and edit Knative CRDs in their namespace like PingSource, ApiServerSource, ContainerSource, SinkBinding, Channel, Broker.

Closes https://github.com/nerc-project/operations/issues/519

computate commented 2 months ago

Thanks for the feedback @larsks, I have moved the rules to a new knative-edit ClusterRole with aggregate-to-edit. Please review again. This PR is to allow users where the Serverless Operator is deployed to create/delete/update/patch/get/watch/list these related knative CRDs in their namespace with the edit role:

'sources.knative.dev/v1'
'serving.knative.dev/v1'
'messaging.knative.dev/v1'
'eventing.knative.dev/v1'