mirror of
https://github.com/vmware-tanzu/velero.git
synced 2026-09-13 11:34:54 +00:00
Shubham Pampattiwar
2a920ab946
The DataUpload and DataDownload controllers now copy and delete namespace-scoped secrets/configmaps for backup/restore PVC provisioning. Add the corresponding kubebuilder RBAC markers (get;list;create;delete on secrets and configmaps) and regenerate the ClusterRole. Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com>
68 lines
1.1 KiB
YAML
68 lines
1.1 KiB
YAML
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: velero-perms
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- secrets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- persistentvolumerclaims
|
|
- persistentvolumes
|
|
- pods
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- velero.io
|
|
resources:
|
|
- backuprepositories
|
|
- backups
|
|
- backupstoragelocations
|
|
- datadownloads
|
|
- datauploads
|
|
- deletebackuprequests
|
|
- downloadrequests
|
|
- podvolumebackups
|
|
- podvolumerestores
|
|
- restores
|
|
- schedules
|
|
- serverstatusrequests
|
|
- volumesnapshotlocations
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- velero.io
|
|
resources:
|
|
- backuprepositories/status
|
|
- backups/status
|
|
- backupstoragelocations/status
|
|
- datadownloads/status
|
|
- datauploads/status
|
|
- deletebackuprequests/status
|
|
- downloadrequests/status
|
|
- podvolumebackups/status
|
|
- podvolumerestores/status
|
|
- restores/status
|
|
- schedules/status
|
|
- serverstatusrequests/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|