fix(RHTAPBUGS-714): aggregate clusterroles

This change should cause these roles to be aggregated into the system wide view, edit, and admin clusterroles. Notably, it will also cause the roles to be aggregated into the dedicated-admin role, which is what I'm really after. Signed-off-by: Ralph Bean <[email protected]>
Troy876 · Aug 23, 2023 · a59b979 · a59b979
1 parent 2bf3743
commit a59b979
Show file tree

Hide file tree

Showing 8 changed files with 20 additions and 0 deletions.
diff --git a/config/rbac/release_editor_role.yaml b/config/rbac/release_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: release-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/release_viewer_role.yaml b/config/rbac/release_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: release-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplan_editor_role.yaml b/config/rbac/releaseplan_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplan-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplan_viewer_role.yaml b/config/rbac/releaseplan_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplan-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplanadmission_editor_role.yaml b/config/rbac/releaseplanadmission_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplanadmission-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releaseplanadmission_viewer_role.yaml b/config/rbac/releaseplanadmission_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releaseplanadmission-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releasestrategy_editor_role.yaml b/config/rbac/releasestrategy_editor_role.yaml
@@ -3,6 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releasestrategy-editor-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com

diff --git a/config/rbac/releasestrategy_viewer_role.yaml b/config/rbac/releasestrategy_viewer_role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: releasestrategy-viewer-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
 rules:
 - apiGroups:
   - appstudio.redhat.com