Introduce a ClusterRole to allow for using knative-serving oustide of…

… cluster-admin
triggermesh · Nov 6, 2018 · 6f4314b · 6f4314b
1 parent c612f6e
commit 6f4314b
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 0 deletions.
diff --git a/cloudbuild.yaml b/cloudbuild.yaml
@@ -8,6 +8,7 @@ steps:
         mkdir -p knative/templates
         mv Chart.yaml ./knative
         mv values.yaml ./knative
+        mv knative-cluster-role.yaml ./knative/templates
 
 # Get the Istio manifest
 - name: 'gcr.io/cloud-builders/wget'

diff --git a/knative-cluster-role.yaml b/knative-cluster-role.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: knative-serving-only-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+  rules:
+    - apiGroups:
+        - serving.knative.dev
+      resources:
+        - configurations
+        - configurationgenerations
+        - routes
+        - revisions
+        - revisionuids
+        - autoscalers
+        - services
+      verbs:
+        - get
+        - list
+        - create
+        - update
+        - delete
+        - patch
+        - watch