diff --git a/helm-chart/kuberay-operator/templates/role.yaml b/helm-chart/kuberay-operator/templates/role.yaml index 851632d514..e01fc69945 100644 --- a/helm-chart/kuberay-operator/templates/role.yaml +++ b/helm-chart/kuberay-operator/templates/role.yaml @@ -9,49 +9,99 @@ rules: - apiGroups: - "" resources: - - pods - - pods/log - - pods/status - - pods/exec - - services - - endpoints - - persistentvolumeclaims - events - - configmaps - - secrets verbs: - - "*" + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: - - namespaces + - pods verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - "" resources: - - deployments - - deployments/status - - daemonsets - - replicasets - - statefulsets - - statefulsets/status + - pods/status verbs: - - "*" + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: - - nodes + - services verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "ray.io" + - ray.io resources: - rayclusters verbs: - - "*" + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - ray.io + resources: + - rayclusters/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +- apiGroups: + - extensions + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update {{- end }}