add GlobalRole platform-self-provisioner and GlobalRole role-template…

…-create-workspaces Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>
kubesphere · Sep 1, 2022 · b67ad9c · b67ad9c
1 parent 33d2900
commit b67ad9c
Showing 1 changed file with 37 additions and 0 deletions.
diff --git a/roles/ks-core/prepare/files/ks-init/role-templates.yaml b/roles/ks-core/prepare/files/ks-init/role-templates.yaml
@@ -385,6 +385,24 @@ rules:
     verbs:
       - '*'
 
+---
+apiVersion: iam.kubesphere.io/v1alpha2
+kind: GlobalRole
+metadata:
+  annotations:
+    iam.kubesphere.io/aggregation-roles: '["role-template-create-workspaces"]'
+    kubesphere.io/creator: admin
+  name: platform-self-provisioner
+rules:
+  - apiGroups:
+      - tenant.kubesphere.io
+    resources:
+      - workspaces
+      - workspacetemplates
+    verbs:
+      - create
+      - watch
+
 ---
 apiVersion: iam.kubesphere.io/v1alpha2
 kind: GlobalRole
@@ -950,6 +968,25 @@ rules:
     verbs:
       - '*'
 
+---
+apiVersion: iam.kubesphere.io/v1alpha2
+kind: GlobalRole
+metadata:
+  annotations:
+    iam.kubesphere.io/role-template-rules: '{"workspaces": "create"}'
+    kubesphere.io/alias-name: Workspaces Create
+  labels:
+    iam.kubesphere.io/role-template: "false"
+  name: role-template-create-workspaces
+rules:
+  - apiGroups:
+      - tenant.kubesphere.io
+    resources:
+      - workspaces
+      - workspacetemplates
+    verbs:
+      - create
+      - watch
 
 ---
 apiVersion: iam.kubesphere.io/v1alpha2