Merge pull request konflux-ci#238 from ralphbean/role-aggregation

fix(RHTAPBUGS-714): aggregate clusterroles
Troy876 · Aug 23, 2023 · 3ba7874 · 3ba7874
2 parents 2bf3743 + a59b979
commit 3ba7874
Show file tree

Hide file tree

Showing 8 changed files with 20 additions and 0 deletions.
diff --git a/config/rbac/release_editor_role.yaml b/config/rbac/release_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: release-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/release_viewer_role.yaml b/config/rbac/release_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: release-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplan_editor_role.yaml b/config/rbac/releaseplan_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplan-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplan_viewer_role.yaml b/config/rbac/releaseplan_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplan-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplanadmission_editor_role.yaml b/config/rbac/releaseplanadmission_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplanadmission-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplanadmission_viewer_role.yaml b/config/rbac/releaseplanadmission_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplanadmission-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releasestrategy_editor_role.yaml b/config/rbac/releasestrategy_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releasestrategy-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releasestrategy_viewer_role.yaml b/config/rbac/releasestrategy_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releasestrategy-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com