add aggregator role for admin and editor

Signed-off-by: Kevin <[email protected]>
opendatahub-io · Jan 25, 2024 · e214398 · e214398
1 parent f2575cd
commit e214398
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/ray-operator/config/rbac/editor_role.yaml b/ray-operator/config/rbac/editor_role.yaml
@@ -0,0 +1,23 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kuberay-edit-role
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+- apiGroups:
+  - ray.io
+  resources:
+  - rayjobs
+  - rayclusters
+  - rayservices
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
diff --git a/ray-operator/config/rbac/kustomization.yaml b/ray-operator/config/rbac/kustomization.yaml
@@ -1,4 +1,5 @@
 resources:
+- editor_role.yaml
 - role.yaml
 - role_binding.yaml
 - leader_election_role.yaml