Add RBAC rules
Recipe ID
org.openrewrite.kubernetes.rbac.AddRuleToRoleArtifact
org.openrewrite.recipe:rewrite-kubernetesAdd RBAC rules to ClusterRoles or namespaced Roles.
Usage
You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.kubernetes.rbac.AddRuleToRole --recipe-option "rbacResourceType=ClusterRole" --recipe-option "rbacResourceName=my-cluster-role" --recipe-option "apiGroups=,v1" --recipe-option "resources=pods" --recipe-option "verbs=get,list"If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-kubernetes:3.17.4Options
| Name | Type | Description |
|---|---|---|
rbacResourceTyperequired | String | Type of RBAC resource to which this recipe adds a rule. e.g. ClusterRole |
rbacResourceNamerequired | String | Glob pattern of the name of the RBAC resource to which this recipe adds a rule. e.g. my-cluster-role |
apiGroupsrequired | Set | Comma-separated list of API groups to which this rule refers. e.g. ,v1 |
resourcesrequired | Set | Comma-separated list of Kubernetes resource types to which this rule refers. e.g. pods |
resourceNames | Set | Comma-separated list of names of Kubernetes resources to which this rule applies. e.g. my-pod |
verbsrequired | Set | The API verbs to enable with this rule. e.g. get,list |
fileMatcher | String | Matching files will be modified. This is a glob expression. e.g. **/pod-*.yml |
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats