-
-
Notifications
You must be signed in to change notification settings - Fork 9.4k
/
role-template-setting.yaml
38 lines (38 loc) · 1.28 KB
/
role-template-setting.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
apiVersion: v1alpha1
kind: "Role"
metadata:
name: role-template-manage-settings
labels:
halo.run/role-template: "true"
annotations:
rbac.authorization.halo.run/dependencies: "[ \"role-template-view-settings\", \"role-template-notifier-config\" ]"
rbac.authorization.halo.run/module: "Settings Management"
rbac.authorization.halo.run/display-name: "Setting Manage"
rbac.authorization.halo.run/ui-permissions: |
["system:settings:manage", "system:notifier:configuration"]
rules:
- apiGroups: [ "" ]
resources: [ "settings" ]
verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
- apiGroups: [ "api.console.halo.run" ]
resources: [ "auth-providers/enable", "auth-providers/disable" ]
verbs: [ "update" ]
---
apiVersion: v1alpha1
kind: "Role"
metadata:
name: role-template-view-settings
labels:
halo.run/role-template: "true"
annotations:
rbac.authorization.halo.run/module: "Settings Management"
rbac.authorization.halo.run/display-name: "Setting View"
rbac.authorization.halo.run/ui-permissions: |
["system:settings:view"]
rules:
- apiGroups: [ "" ]
resources: [ "settings" ]
verbs: [ "get", "list" ]
- apiGroups: [ "api.console.halo.run" ]
resources: [ "auth-providers" ]
verbs: [ "get", "list" ]