-
-
Notifications
You must be signed in to change notification settings - Fork 9.4k
/
role-template-anonymous.yaml
48 lines (48 loc) · 1.44 KB
/
role-template-anonymous.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
apiVersion: v1alpha1
kind: "Role"
metadata:
name: anonymous
labels:
halo.run/role-template: "true"
halo.run/hidden: "true"
annotations:
rbac.authorization.halo.run/dependencies: |
[ "role-template-own-permissions", "role-template-public-apis" ]
rules:
- apiGroups: [ "api.halo.run" ]
resources: [ "comments", "comments/reply" ]
verbs: [ "create", "get", "list" ]
- apiGroups: [ "api.halo.run" ]
resources: [ "*" ]
verbs: [ "*" ]
- apiGroups: [ "api.console.halo.run" ]
resources: [ "users" ]
resourceNames: [ "-" ]
verbs: [ "get" ]
- nonResourceURLs: [ "/apis/api.halo.run/v1alpha1/trackers/*" ]
verbs: [ "create" ]
- nonResourceURLs: [ "/actuator/globalinfo", "/actuator/health", "/actuator/health/*", "/login/public-key" ]
verbs: [ "get" ]
- nonResourceURLs: [ "/apis/api.console.halo.run/v1alpha1/system/initialize" ]
verbs: [ "create" ]
---
apiVersion: v1alpha1
kind: "Role"
metadata:
name: role-template-public-apis
labels:
halo.run/role-template: "true"
halo.run/hidden: "true"
rules:
- apiGroups: [ "api.halo.run" ]
resources: [ "*" ]
verbs: [ "get", "list" ]
- apiGroups: [ "api.content.halo.run" ]
resources: [ "*" ]
verbs: [ "get", "list" ]
- apiGroups: [ "api.plugin.halo.run" ]
resources: [ "*" ]
verbs: [ "get", "list" ]
- apiGroups: [ "api.notification.halo.run" ]
resources: [ "subscriptions/unsubscribe" ]
verbs: [ "get", "list" ]