Add role yaml with the minimum required permissions

openshift · Dec 3, 2020 · 85e9fae · 85e9fae
1 parent 25cb079
commit 85e9fae
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 0 deletions.
diff --git a/docs/user/kubevirt/OWNERS b/docs/user/kubevirt/OWNERS
@@ -0,0 +1,7 @@
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+# This file just uses aliases defined in OWNERS_ALIASES.
+
+approvers:
+  - kubevirt-approvers
+reviewers:
+  - kubevirt-reviewers
diff --git a/docs/user/kubevirt/role.yaml b/docs/user/kubevirt/role.yaml
@@ -0,0 +1,18 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: tenantcluster-installer
+  namespace: <tenantcluster-namespace>
+rules:
+- apiGroups: [""]
+  resources: ["secrets"]
+  verbs: ["get", "list", "create", "delete"]
+- apiGroups: ["kubevirt.io"]
+  resources: ["virtualmachines"]
+  verbs: ["get", "list", "create", "delete"]
+- apiGroups: ["cdi.kubevirt.io"]
+  resources: ["datavolumes"]
+  verbs: ["get", "list", "create", "delete"]
+- apiGroups: ["k8s.cni.cncf.io"]
+  resources: ["network-attachment-definitions"]
+  verbs: ["get"]