Add CRD admin permission to deployer SA (#1977)

This is following the instruction here
https://github.com/GoogleCloudPlatform/marketplace-k8s-app-tools/blob/master/docs/schema.md#deployerserviceaccount
This commit is contained in:
IronPan 2019-08-28 13:48:22 -07:00 committed by GitHub
parent c642889a47
commit 7bb4c2a013
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions

View File

@ -94,5 +94,11 @@ x-google-marketplace:
deployerServiceAccount:
roles:
- type: ClusterRole # This is a cluster-wide ClusterRole
rulesType: CUSTOM # We specify our own custom RBAC roles
rules:
- apiGroups: ['apiextensions.k8s.io']
resources: ['customresourcedefinitions']
verbs: ['*']
- type: Role # This is a namespaced Role
rulesType: PREDEFINED
rulesFromRoleName: edit # Use predefined role named "edit"
rulesFromRoleName: edit # Use predefined role named "edit"