apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{},"labels":{"app.kubernetes.io/instance":"knative-operator","operator.knative.dev/release":"v0.24.0"},"name":"knative-serving-operator"},"rules":[{"apiGroups":["operator.knative.dev"],"resources":["*"],"verbs":["*"]},{"apiGroups":["rbac.authorization.k8s.io"],"resourceNames":["system:auth-delegator"],"resources":["clusterroles"],"verbs":["bind","get"]},{"apiGroups":["rbac.authorization.k8s.io"],"resourceNames":["extension-apiserver-authentication-reader"],"resources":["roles"],"verbs":["bind","get"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterroles","roles"],"verbs":["create","delete","escalate","get","list","update"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterrolebindings","rolebindings"],"verbs":["create","delete","list","get","update"]},{"apiGroups":["apiregistration.k8s.io"],"resources":["apiservices"],"verbs":["update"]},{"apiGroups":[""],"resources":["services"],"verbs":["create","delete","get","list","watch"]},{"apiGroups":["caching.internal.knative.dev"],"resources":["images"],"verbs":["*"]},{"apiGroups":[""],"resources":["namespaces"],"verbs":["get","update","watch"]},{"apiGroups":[""],"resources":["events"],"verbs":["create","update","patch"]},{"apiGroups":[""],"resources":["configmaps"],"verbs":["create","delete","get","list","watch"]},{"apiGroups":["security.istio.io","apps","policy"],"resources":["poddisruptionbudgets","peerauthentications","deployments","daemonsets","replicasets","statefulsets"],"verbs":["create","delete","get","list","watch","update"]},{"apiGroups":["apiregistration.k8s.io"],"resources":["apiservices"],"verbs":["create","delete","get","list"]},{"apiGroups":["autoscaling"],"resources":["horizontalpodautoscalers"],"verbs":["create","delete","get","list"]},{"apiGroups":["coordination.k8s.io"],"resources":["leases"],"verbs":["*"]},{"apiGroups":["apiextensions.k8s.io"],"resources":["customresourcedefinitions"],"verbs":["*"]},{"apiGroups":[""],"resourceNames":["knative-ingressgateway"],"resources":["services","deployments","horizontalpodautoscalers"],"verbs":["delete"]},{"apiGroups":[""],"resourceNames":["config-controller"],"resources":["configmaps"],"verbs":["delete"]},{"apiGroups":[""],"resourceNames":["knative-serving-operator"],"resources":["serviceaccounts"],"verbs":["delete"]}]}
'
creationTimestamp: '2021-08-30T18:59:24Z'
labels:
app.kubernetes.io/instance: knative-operator
operator.knative.dev/release: v0.24.0
managedFields:
- apiVersion: rbac.authorization.k8s.io/v1
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:kubectl.kubernetes.io/last-applied-configuration: {}
f:labels:
.: {}
f:app.kubernetes.io/instance: {}
f:operator.knative.dev/release: {}
f:rules: {}
manager: argocd-application-controller
operation: Update
time: '2021-08-30T18:59:24Z'
name: knative-serving-operator
resourceVersion: '4645'
uid: b4a26fae-5867-490e-986d-68b699b88005
rules:
- apiGroups:
- operator.knative.dev
resources:
- '*'
verbs:
- '*'
- apiGroups:
- rbac.authorization.k8s.io
resourceNames:
- system:auth-delegator
resources:
- clusterroles
verbs:
- bind
- get
- apiGroups:
- rbac.authorization.k8s.io
resourceNames:
- extension-apiserver-authentication-reader
resources:
- roles
verbs:
- bind
- get
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterroles
- roles
verbs:
- create
- delete
- escalate
- get
- list
- update
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterrolebindings
- rolebindings
verbs:
- create
- delete
- list
- get
- update
- apiGroups:
- apiregistration.k8s.io
resources:
- apiservices
verbs:
- update
- apiGroups:
- ''
resources:
- services
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- caching.internal.knative.dev
resources:
- images
verbs:
- '*'
- apiGroups:
- ''
resources:
- namespaces
verbs:
- get
- update
- watch
- apiGroups:
- ''
resources:
- events
verbs:
- create
- update
- patch
- apiGroups:
- ''
resources:
- configmaps
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- security.istio.io
- apps
- policy
resources:
- poddisruptionbudgets
- peerauthentications
- deployments
- daemonsets
- replicasets
- statefulsets
verbs:
- create
- delete
- get
- list
- watch
- update
- apiGroups:
- apiregistration.k8s.io
resources:
- apiservices
verbs:
- create
- delete
- get
- list
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- create
- delete
- get
- list
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- '*'
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
verbs:
- '*'
- apiGroups:
- ''
resourceNames:
- knative-ingressgateway
resources:
- services
- deployments
- horizontalpodautoscalers
verbs:
- delete
- apiGroups:
- ''
resourceNames:
- config-controller
resources:
- configmaps
verbs:
- delete
- apiGroups:
- ''
resourceNames:
- knative-serving-operator
resources:
- serviceaccounts
verbs:
- delete