Merge pull request #182 from adambkaplan/source-release-from-gh

Source release.yaml from GitHub release
shipwright-io · May 9, 2024 · d831c31 · d831c31
2 parents d26c155 + 3134341
commit d831c31
Show file tree

Hide file tree

Showing 5 changed files with 15,999 additions and 11,696 deletions.
diff --git a/bundle/manifests/shipwright-operator.clusterserviceversion.yaml b/bundle/manifests/shipwright-operator.clusterserviceversion.yaml
@@ -245,6 +245,25 @@ spec:
           - events
           verbs:
           - create
+        - apiGroups:
+          - ""
+          resources:
+          - pods
+          - events
+          - configmaps
+          - secrets
+          - limitranges
+          - namespaces
+          - services
+          verbs:
+          - '*'
+        - apiGroups:
+          - admissionregistration.k8s.io
+          - admissionregistration.k8s.io/v1beta1
+          resources:
+          - validatingwebhookconfigurations
+          verbs:
+          - '*'
         - apiGroups:
           - admissionregistration.k8s.io
           resources:

diff --git a/config/rbac/kustomization.yaml b/config/rbac/kustomization.yaml
@@ -18,3 +18,5 @@ resources:
 - shipwright_build_controller_role_binding.yaml
 - shipwright_build_aggregate_role.yaml
 - shipwright_build_aggregate_role_binding.yaml
+- shipwright_build_webhook_role.yaml
+- shipwright_build_webhook_role_binding.yaml
diff --git a/config/rbac/shipwright_build_webhook_role.yaml b/config/rbac/shipwright_build_webhook_role.yaml
@@ -0,0 +1,24 @@
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: build-webhook
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - events
+      - configmaps
+      - secrets
+      - limitranges
+      - namespaces
+      - services
+    verbs:
+      - '*'
+  - apiGroups:
+      - admissionregistration.k8s.io
+      - admissionregistration.k8s.io/v1beta1
+    resources:
+      - validatingwebhookconfigurations
+    verbs:
+      - '*'
diff --git a/config/rbac/shipwright_build_webhook_role_binding.yaml b/config/rbac/shipwright_build_webhook_role_binding.yaml
@@ -0,0 +1,12 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: build-webhook
+roleRef:
+  kind: ClusterRole
+  name: build-webhook
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+- kind: ServiceAccount
+  name: operator
+  namespace: system