You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
flux2/manifests
Max Jonas Werner a21fd5a0e3
feat: create view/edit ClusterRoles upon install
This way users can make use of these roles by having them
aggregated into the 'view', 'admin' and 'edit' ClusterRoles
present on Kubernetes clusters by default.

Without these roles you would have to bind subjects in a confined
Namespace to the `cluster-admin` ClusterRole which lets them create
cluster-scoped resources. To really confine subjects to a single
Namespace you would rather want to bind them to the `admin` or `edit`
ClusterRole so that they cannot create cluster-scoped resources. This
is where these new ClusterRoles created in this commit come into play,
letting subjects bound to one of these two ClusterRoles created Flux
CRDs such as HelmRelease or Kustomization.

Signed-off-by: Max Jonas Werner <mail@makk.es>
4 years ago
..
bases Update toolkit components 4 years ago
crds Update toolkit components 4 years ago
install Add part-of label to the static manifests 4 years ago
integrations Avoid substitution issue in kustomize credentials sync 4 years ago
monitoring Update podmonitor.yaml 4 years ago
policies Keep policy order as defined 4 years ago
rbac feat: create view/edit ClusterRoles upon install 4 years ago
scripts Make manifests dir `bundle.sh` configurable 4 years ago