Skip to content

Commit

Permalink
Create RBAC for Compute Clusters (#125)
Browse files Browse the repository at this point in the history
Adds in the necessary endpoints and permissions for compute APIs
  • Loading branch information
nsricardor authored Oct 18, 2024
1 parent 771e327 commit 5cb6871
Show file tree
Hide file tree
Showing 2 changed files with 10 additions and 2 deletions.
4 changes: 2 additions & 2 deletions charts/identity/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ description: A Helm chart for deploying Unikorn's IdP

type: application

version: v0.2.41
appVersion: v0.2.41
version: v0.2.42
appVersion: v0.2.42

icon: https://raw.githubusercontent.com/unikorn-cloud/assets/main/images/logos/dark-on-light/icon.png

Expand Down
8 changes: 8 additions & 0 deletions charts/identity/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -90,6 +90,9 @@ roles:
kubernetesclusters: [create,read,update,delete]
applications: [create,read,update,delete]
applicationsets: [create,read,update,delete]
computeclusters: [create,read,update,delete]
servers: [create,read,update,delete]
securitygroups: [create,read,update,delete]
# An infrastructure manager service is a role primarily for Kubernetes like
# services that can manage identities and physical networks on behalf of a cluster.
infra-manager-service:
Expand Down Expand Up @@ -125,6 +128,9 @@ roles:
kubernetesclusters: [create,read,update,delete]
applications: [read]
applicationsets: [create,read,update,delete]
computeclusters: [create,read,update,delete]
servers: [create,read,update,delete]
securitygroups: [create,read,update,delete]
# A user can view projects they are a member of and
# provision kubernetes clusters.
user:
Expand All @@ -140,6 +146,7 @@ roles:
kubernetesclusters: [create,read,update,delete]
applications: [read]
applicationsets: [create,read,update,delete]
computeclusters: [create,read,update,delete]
# A reader can view projects they are a member of and view
# kubernetes clusters.
reader:
Expand All @@ -153,6 +160,7 @@ roles:
kubernetesclusters: [read]
applications: [read]
applicationsets: [read]
computeclusters: [read]

ingress:
# Sets the ingress class to use.
Expand Down

0 comments on commit 5cb6871

Please sign in to comment.