Add CRD admin permission to deployer SA (#1977)
This is following the instruction here https://github.com/GoogleCloudPlatform/marketplace-k8s-app-tools/blob/master/docs/schema.md#deployerserviceaccount
This commit is contained in:
parent
c642889a47
commit
7bb4c2a013
|
|
@ -94,5 +94,11 @@ x-google-marketplace:
|
||||||
deployerServiceAccount:
|
deployerServiceAccount:
|
||||||
roles:
|
roles:
|
||||||
- type: ClusterRole # This is a cluster-wide ClusterRole
|
- type: ClusterRole # This is a cluster-wide ClusterRole
|
||||||
|
rulesType: CUSTOM # We specify our own custom RBAC roles
|
||||||
|
rules:
|
||||||
|
- apiGroups: ['apiextensions.k8s.io']
|
||||||
|
resources: ['customresourcedefinitions']
|
||||||
|
verbs: ['*']
|
||||||
|
- type: Role # This is a namespaced Role
|
||||||
rulesType: PREDEFINED
|
rulesType: PREDEFINED
|
||||||
rulesFromRoleName: edit # Use predefined role named "edit"
|
rulesFromRoleName: edit # Use predefined role named "edit"
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue