373 lines
6.2 KiB
YAML
373 lines
6.2 KiB
YAML
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: kueue
|
|
app.kubernetes.io/name: kueue
|
|
app.kubernetes.io/version: v0.12.3
|
|
control-plane: controller-manager
|
|
name: kueue-manager-role
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- limitranges
|
|
- namespaces
|
|
- nodes
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/finalizers
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- podtemplates
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resources:
|
|
- mutatingwebhookconfigurations
|
|
- validatingwebhookconfigurations
|
|
verbs:
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- deployments
|
|
- replicasets
|
|
- statefulsets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- autoscaling.x-k8s.io
|
|
resources:
|
|
- provisioningrequests
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- autoscaling.x-k8s.io
|
|
resources:
|
|
- provisioningrequests/status
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs/finalizers
|
|
- jobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- flowcontrol.apiserver.k8s.io
|
|
resources:
|
|
- flowschemas
|
|
- prioritylevelconfigurations
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- flowcontrol.apiserver.k8s.io
|
|
resources:
|
|
- flowschemas/status
|
|
verbs:
|
|
- patch
|
|
- apiGroups:
|
|
- jobset.x-k8s.io
|
|
resources:
|
|
- jobsets
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- jobset.x-k8s.io
|
|
resources:
|
|
- jobsets/finalizers
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- jobset.x-k8s.io
|
|
resources:
|
|
- jobsets/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- kubeflow.org
|
|
resources:
|
|
- jaxjobs
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- kubeflow.org
|
|
resources:
|
|
- jaxjobs/finalizers
|
|
- mpijobs/finalizers
|
|
- paddlejobs/finalizers
|
|
- pytorchjobs/finalizers
|
|
- tfjobs/finalizers
|
|
- xgboostjobs/finalizers
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- kubeflow.org
|
|
resources:
|
|
- jaxjobs/status
|
|
- mpijobs/status
|
|
- paddlejobs/status
|
|
- pytorchjobs/status
|
|
- tfjobs/status
|
|
- xgboostjobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- kubeflow.org
|
|
resources:
|
|
- mpijobs
|
|
- paddlejobs
|
|
- pytorchjobs
|
|
- tfjobs
|
|
- xgboostjobs
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- kueue.x-k8s.io
|
|
resources:
|
|
- admissionchecks
|
|
- clusterqueues
|
|
- cohorts
|
|
- localqueues
|
|
- workloads
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- kueue.x-k8s.io
|
|
resources:
|
|
- admissionchecks/finalizers
|
|
- clusterqueues/finalizers
|
|
- localqueues/finalizers
|
|
- resourceflavors/finalizers
|
|
- topologies/finalizers
|
|
- workloads/finalizers
|
|
verbs:
|
|
- update
|
|
- apiGroups:
|
|
- kueue.x-k8s.io
|
|
resources:
|
|
- admissionchecks/status
|
|
- clusterqueues/status
|
|
- cohorts/status
|
|
- localqueues/status
|
|
- multikueueclusters/status
|
|
- workloads/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- kueue.x-k8s.io
|
|
resources:
|
|
- multikueueclusters
|
|
- multikueueconfigs
|
|
- provisioningrequestconfigs
|
|
- workloadpriorityclasses
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- kueue.x-k8s.io
|
|
resources:
|
|
- resourceflavors
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- kueue.x-k8s.io
|
|
resources:
|
|
- topologies
|
|
verbs:
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- leaderworkerset.x-k8s.io
|
|
resources:
|
|
- leaderworkersets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- node.k8s.io
|
|
resources:
|
|
- runtimeclasses
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ray.io
|
|
resources:
|
|
- rayclusters
|
|
- rayjobs
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ray.io
|
|
resources:
|
|
- rayclusters/finalizers
|
|
- rayjobs/finalizers
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- ray.io
|
|
resources:
|
|
- rayclusters/status
|
|
- rayjobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- scheduling.k8s.io
|
|
resources:
|
|
- priorityclasses
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- workload.codeflare.dev
|
|
resources:
|
|
- appwrappers
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- workload.codeflare.dev
|
|
resources:
|
|
- appwrappers/finalizers
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- workload.codeflare.dev
|
|
resources:
|
|
- appwrappers/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|