feat(helm): add rbac gfor mimirrules

Signed-off-by: Hy3n4 <hy3nk4@gmail.com>
oskoperator · Dec 11, 2023 · 4d32e27 · 4d32e27
1 parent 9b23161
commit 4d32e27
Showing 2 changed files with 48 additions and 0 deletions.
diff --git a/helm/osko/templates/osko_mimirrule_editor_role.yaml b/helm/osko/templates/osko_mimirrule_editor_role.yaml
@@ -0,0 +1,26 @@
+# permissions for end users to edit mimirrules.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    {{ include "osko.labels" . | nindent 4 }}
+  name: {{ .Release.Name }}-editor-role
+rules:
+- apiGroups:
+  - osko.dev
+  resources:
+  - mimirrules
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - osko.dev
+  resources:
+  - mimirrules/status
+  verbs:
+  - get
diff --git a/helm/osko/templates/osko_mimirrule_viewer_role.yaml b/helm/osko/templates/osko_mimirrule_viewer_role.yaml
@@ -0,0 +1,22 @@
+# permissions for end users to view mimirrules.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    {{ include "osko.labels" . | nindent 4 }}
+  name: {{ .Release.Name }}-viewer-role
+rules:
+- apiGroups:
+  - osko.dev
+  resources:
+  - mimirrules
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - osko.dev
+  resources:
+  - mimirrules/status
+  verbs:
+  - get