apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: ns-editor rules: - apiGroups: - kubeflow.org resources: - poddefaults verbs: - get - list - watch - apiGroups: - kubeflow.org resources: - notebooks - notebooks/finalizers - poddefaults verbs: - get - list - create - delete - apiGroups: - eventing.knative.dev - messaging.knative.dev - sources.knative.dev - flows.knative.dev - bindings.knative.dev resources: - '*' verbs: - create - update - patch - delete - apiGroups: - kubeflow.org resources: - 'mpijobs' verbs: - get - list - watch - create - update - patch - delete - apiGroups: - serving.knative.dev resources: - '*' verbs: - create - update - patch - delete - apiGroups: - networking.internal.knative.dev - autoscaling.internal.knative.dev - caching.internal.knative.dev resources: - '*' verbs: - get - list - watch - apiGroups: - istio.io - networking.istio.io resources: - '*' verbs: - get - list - watch - create - delete - deletecollection - patch - update - apiGroups: - kubeflow.org resources: - experiments - trials - suggestions verbs: - get - list - watch - create - delete - deletecollection - patch - update - apiGroups: - serving.kubeflow.org resources: - inferenceservices verbs: - get - list - watch - create - delete - deletecollection - patch - update - apiGroups: - serving.knative.dev resources: - services - services/status - routes - routes/status - configurations - configurations/status - revisions - revisions/status verbs: - get - list - watch - create - delete - deletecollection - patch - update - apiGroups: - serving.kserve.io resources: - inferenceservices verbs: - get - list - watch - create - delete - deletecollection - patch - update - apiGroups: - "" resources: - pods/attach - pods/exec - pods/portforward - pods/proxy - secrets - services/proxy verbs: - get - list - watch - apiGroups: - "" resources: - serviceaccounts verbs: - impersonate - apiGroups: - "" resources: - pods - pods/attach - pods/exec - pods/portforward - pods/proxy verbs: - create - delete - deletecollection - patch - update - apiGroups: - "" resources: - configmaps - endpoints - persistentvolumeclaims - replicationcontrollers - replicationcontrollers/scale - secrets - serviceaccounts - services - services/proxy verbs: - create - delete - deletecollection - patch - update - apiGroups: - apps resources: - daemonsets - deployments - deployments/rollback - deployments/scale - replicasets - replicasets/scale - statefulsets - statefulsets/scale verbs: - create - delete - deletecollection - patch - update - apiGroups: - autoscaling resources: - horizontalpodautoscalers verbs: - create - delete - deletecollection - patch - update - apiGroups: - batch resources: - cronjobs - jobs verbs: - create - delete - deletecollection - patch - update - apiGroups: - extensions resources: - daemonsets - deployments - deployments/rollback - deployments/scale - ingresses - networkpolicies - replicasets - replicasets/scale - replicationcontrollers/scale verbs: - create - delete - deletecollection - patch - update - apiGroups: - policy resources: - poddisruptionbudgets verbs: - create - delete - deletecollection - patch - update - apiGroups: - networking.k8s.io resources: - ingresses - networkpolicies verbs: - create - delete - deletecollection - patch - update - apiGroups: - pipelines.kubeflow.org resources: - pipelines - pipelines/versions verbs: - create - delete - update - apiGroups: - pipelines.kubeflow.org resources: - experiments verbs: - archive - create - delete - unarchive - apiGroups: - pipelines.kubeflow.org resources: - runs verbs: - archive - create - delete - retry - terminate - unarchive - apiGroups: - pipelines.kubeflow.org resources: - jobs verbs: - create - delete - disable - enable - apiGroups: - kubeflow.org resources: - scheduledworkflows verbs: - '*' - apiGroups: - argoproj.io resources: - cronworkflows - cronworkflows/finalizers - workflows - workflows/finalizers - workfloweventbindings - workflowtemplates verbs: - '*' - apiGroups: - pipelines.kubeflow.org resources: - pipelines - pipelines/versions - experiments - runs - jobs verbs: - get - list - apiGroups: - kubeflow.org resources: - viewers verbs: - create - get - delete - apiGroups: - pipelines.kubeflow.org resources: - visualizations verbs: - create - apiGroups: - kubeflow.org resources: - tfjobs - pytorchjobs - mxjobs - xgboostjobs verbs: - create - delete - get - list - patch - update - watch - apiGroups: - kubeflow.org resources: - tfjobs/status - pytorchjobs/status - mxjobs/status - xgboostjobs/status verbs: - get - apiGroups: - kubeflow.org resources: - notebooks - notebooks/finalizers - poddefaults verbs: - get - list - apiGroups: - storage.k8s.io resources: - storageclasses verbs: - get - list - watch - apiGroups: - eventing.knative.dev - messaging.knative.dev - sources.knative.dev - flows.knative.dev - bindings.knative.dev resources: - '*' verbs: - get - list - watch - apiGroups: - serving.knative.dev - networking.internal.knative.dev - autoscaling.internal.knative.dev - caching.internal.knative.dev resources: - '*' verbs: - get - list - watch - apiGroups: - istio.io - networking.istio.io resources: - '*' verbs: - get - list - watch - apiGroups: - kubeflow.org resources: - experiments - trials - suggestions verbs: - get - list - watch - apiGroups: - serving.kubeflow.org resources: - inferenceservices verbs: - get - list - watch - apiGroups: - serving.knative.dev resources: - services - services/status - routes - routes/status - configurations - configurations/status - revisions - revisions/status verbs: - get - list - apiGroups: - serving.kserve.io resources: - inferenceservices verbs: - get - list - watch - apiGroups: - "" resources: - configmaps - endpoints - persistentvolumeclaims - persistentvolumeclaims/status - pods - replicationcontrollers - replicationcontrollers/scale - serviceaccounts - services - services/status verbs: - get - list - watch - apiGroups: - "" resources: - bindings - events - limitranges - namespaces/status - pods/log - pods/status - replicationcontrollers/status - resourcequotas - resourcequotas/status verbs: - get - list - watch - apiGroups: - "" resources: - namespaces verbs: - get - list - watch - apiGroups: - apps resources: - controllerrevisions - daemonsets - daemonsets/status - deployments - deployments/scale - deployments/status - replicasets - replicasets/scale - replicasets/status - statefulsets - statefulsets/scale - statefulsets/status verbs: - get - list - watch - apiGroups: - autoscaling resources: - horizontalpodautoscalers - horizontalpodautoscalers/status verbs: - get - list - watch - apiGroups: - batch resources: - cronjobs - cronjobs/status - jobs - jobs/status verbs: - get - list - watch - apiGroups: - extensions resources: - daemonsets - daemonsets/status - deployments - deployments/scale - deployments/status - ingresses - ingresses/status - networkpolicies - replicasets - replicasets/scale - replicasets/status - replicationcontrollers/scale verbs: - get - list - watch - apiGroups: - policy resources: - poddisruptionbudgets - poddisruptionbudgets/status verbs: - get - list - watch - apiGroups: - networking.k8s.io resources: - ingresses - ingresses/status - networkpolicies verbs: - get - list - watch - apiGroups: - kubeflow.org resources: - tfjobs - pytorchjobs - mxjobs - xgboostjobs verbs: - get - list - watch - apiGroups: - kubeflow.org resources: - notebooks - notebooks/status verbs: - get - list - watch - apiGroups: - tensorboard.kubeflow.org resources: - tensorboards - tensorboards/finalizers verbs: - get - list - apiGroups: - "" resources: - persistentvolumeclaims verbs: - get - list - watch - apiGroups: - kubeflow.org resources: - notebooks - notebooks/status verbs: - get - list - watch - create - delete - deletecollection - patch - update - apiGroups: - tensorboard.kubeflow.org resources: - tensorboards - tensorboards/finalizers verbs: - get - list - create - delete - apiGroups: - "" resources: - persistentvolumeclaims verbs: - create - delete - get - list - watch - update - patch