Skip to content
This repository was archived by the owner on Dec 11, 2023. It is now read-only.

Commit 12da3c5

Browse files
author
odacremolbap
committed
add support for addressables
1 parent fb550b0 commit 12da3c5

File tree

3 files changed

+188
-0
lines changed

3 files changed

+188
-0
lines changed

‎config/200-kn-clusterrole-addressable-resolvers.yaml‎

Lines changed: 152 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,152 @@
1+
# Copyright 2019 The Knative Authors
2+
#
3+
# Licensed under the Apache License, Version 2.0 (the "License");
4+
# you may not use this file except in compliance with the License.
5+
# You may obtain a copy of the License at
6+
#
7+
# http://www.apache.org/licenses/LICENSE-2.0
8+
#
9+
# Unless required by applicable law or agreed to in writing, software
10+
# distributed under the License is distributed on an "AS IS" BASIS,
11+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12+
# See the License for the specific language governing permissions and
13+
# limitations under the License.
14+
15+
# Use this aggregated ClusterRole when you need readonly access to "Addressables"
16+
apiVersion: rbac.authorization.k8s.io/v1
17+
kind: ClusterRole
18+
metadata:
19+
name: addressable-resolver
20+
labels:
21+
eventing.knative.dev/release: devel
22+
app.kubernetes.io/version: devel
23+
app.kubernetes.io/name: knative-eventing
24+
aggregationRule:
25+
clusterRoleSelectors:
26+
- matchLabels:
27+
duck.knative.dev/addressable: "true"
28+
rules: [] # Rules are automatically filled in by the controller manager.
29+
30+
---
31+
32+
kind: ClusterRole
33+
apiVersion: rbac.authorization.k8s.io/v1
34+
metadata:
35+
name: service-addressable-resolver
36+
labels:
37+
eventing.knative.dev/release: devel
38+
duck.knative.dev/addressable: "true"
39+
app.kubernetes.io/version: devel
40+
app.kubernetes.io/name: knative-eventing
41+
# Do not use this role directly. These rules will be added to the "addressable-resolver" role.
42+
rules:
43+
- apiGroups:
44+
- ""
45+
resources:
46+
- services
47+
verbs:
48+
- get
49+
- list
50+
- watch
51+
52+
---
53+
54+
kind: ClusterRole
55+
apiVersion: rbac.authorization.k8s.io/v1
56+
metadata:
57+
name: serving-addressable-resolver
58+
labels:
59+
eventing.knative.dev/release: devel
60+
duck.knative.dev/addressable: "true"
61+
app.kubernetes.io/version: devel
62+
app.kubernetes.io/name: knative-eventing
63+
# Do not use this role directly. These rules will be added to the "addressable-resolver" role.
64+
rules:
65+
- apiGroups:
66+
- serving.knative.dev
67+
resources:
68+
- routes
69+
- routes/status
70+
- services
71+
- services/status
72+
verbs:
73+
- get
74+
- list
75+
- watch
76+
77+
---
78+
79+
kind: ClusterRole
80+
apiVersion: rbac.authorization.k8s.io/v1
81+
metadata:
82+
name: channel-addressable-resolver
83+
labels:
84+
eventing.knative.dev/release: devel
85+
duck.knative.dev/addressable: "true"
86+
app.kubernetes.io/version: devel
87+
app.kubernetes.io/name: knative-eventing
88+
# Do not use this role directly. These rules will be added to the "addressable-resolver" role.
89+
rules:
90+
- apiGroups:
91+
- messaging.knative.dev
92+
resources:
93+
- channels
94+
- channels/status
95+
verbs:
96+
- get
97+
- list
98+
- watch
99+
- apiGroups:
100+
- messaging.knative.dev
101+
resources:
102+
- channels/finalizers
103+
verbs:
104+
- update
105+
106+
---
107+
108+
kind: ClusterRole
109+
apiVersion: rbac.authorization.k8s.io/v1
110+
metadata:
111+
name: broker-addressable-resolver
112+
labels:
113+
eventing.knative.dev/release: devel
114+
duck.knative.dev/addressable: "true"
115+
app.kubernetes.io/version: devel
116+
app.kubernetes.io/name: knative-eventing
117+
# Do not use this role directly. These rules will be added to the "addressable-resolver" role.
118+
rules:
119+
- apiGroups:
120+
- eventing.knative.dev
121+
resources:
122+
- brokers
123+
- brokers/status
124+
verbs:
125+
- get
126+
- list
127+
- watch
128+
129+
---
130+
131+
kind: ClusterRole
132+
apiVersion: rbac.authorization.k8s.io/v1
133+
metadata:
134+
name: flows-addressable-resolver
135+
labels:
136+
eventing.knative.dev/release: devel
137+
duck.knative.dev/addressable: "true"
138+
app.kubernetes.io/version: devel
139+
app.kubernetes.io/name: knative-eventing
140+
# Do not use this role directly. These rules will be added to the "addressable-resolver" role.
141+
rules:
142+
- apiGroups:
143+
- flows.knative.dev
144+
resources:
145+
- sequences
146+
- sequences/status
147+
- parallels
148+
- parallels/status
149+
verbs:
150+
- get
151+
- list
152+
- watch

‎config/200-triggermesh-core-addressable-resolvers.yaml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
# This role provides readonly access to "Addressable" duck types.
2+
# All the rules it contains get aggregated into the "addressable-resolver" ClusterRole.
3+
# https://github.com/knative/eventing/blob/release-0.26/config/core/roles/addressable-resolvers-clusterrole.yaml#L15-L28
4+
apiVersion: rbac.authorization.k8s.io/v1
5+
kind: ClusterRole
6+
metadata:
7+
name: triggermesh-core-addressable-resolver
8+
labels:
9+
app.kubernetes.io/part-of: triggermesh
10+
duck.knative.dev/addressable: 'true'
11+
rules:
12+
# +rbac-check
13+
- apiGroups:
14+
- eventing.triggermesh.io
15+
resources:
16+
- redisbrokers
17+
verbs:
18+
- get
19+
- list
20+
- watch

‎config/202-clusterrolebindings.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,3 +16,19 @@ roleRef:
1616
kind: ClusterRole
1717
name: triggermesh-core-controller
1818

19+
---
20+
21+
apiVersion: rbac.authorization.k8s.io/v1
22+
kind: ClusterRoleBinding
23+
metadata:
24+
name: triggermesh-core-controller-resolver
25+
labels:
26+
app.kubernetes.io/part-of: triggermesh
27+
subjects:
28+
- kind: ServiceAccount
29+
name: triggermesh-core-controller
30+
namespace: triggermesh
31+
roleRef:
32+
apiGroup: rbac.authorization.k8s.io
33+
kind: ClusterRole
34+
name: addressable-resolver

0 commit comments

Comments
 (0)