Add secrets viewer role to get kubeconfigs

Signed-off-by: Andrei Pavlov <[email protected]>
k0rdent · Nov 8, 2024 · 10db075 · 10db075
1 parent fb83d23
commit 10db075
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/templates/provider/hmc/templates/rbac/user-facing/secrets-viewer.yaml b/templates/provider/hmc/templates/rbac/user-facing/secrets-viewer.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "hmc.fullname" . }}-secrets-viewer-role
+  labels:
+    hmc.mirantis.com/aggregate-to-namespace-editor: "true"
+    hmc.mirantis.com/aggregate-to-namespace-viewer: "true"
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs: {{ include "rbac.viewerVerbs" . | nindent 6 }}