24 lines
660 B
YAML
24 lines
660 B
YAML
apiVersion: rbac.authorization.k8s.io/v1
|
|
{{- if .Values.scope.singleNamespace }}
|
|
kind: Role
|
|
{{- else }}
|
|
kind: ClusterRole
|
|
{{- end }}
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: {{ include "actions-runner-controller.managerRoleName" . }}-secrets
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
{{- if .Values.rbac.allowGrantingKubernetesContainerModePermissions }}
|
|
{{/* These permissions are required by ARC to create RBAC resources for the runner pod to use the kubernetes container mode. */}}
|
|
{{/* See https://github.com/actions/actions-runner-controller/pull/1268/files#r917331632 */}}
|
|
- create
|
|
- delete
|
|
{{- end }} |