astral/kuber
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: harden self-managed reconciliation

Browse Source
This commit is contained in:
dmgnr
2026-09-05 10:17:55 +00:00 Unverified
parent 8e9d207915
commit 321f4e807a
40 changed files with 4977 additions and 404 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kuberrc.ts
+137 -13
View File
@@ -24,7 +24,35 @@ export default {
{
apiGroups: [""],
resources: ["secrets", "configmaps", "pods", "pods/log"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: [""],
resources: ["serviceaccounts"],
resourceNames: ["kuber-server"],
verbs: ["get", "update", "patch"],
},
{
apiGroups: ["rbac.authorization.k8s.io"],
resources: ["roles", "rolebindings"],
resourceNames: ["kuber-server-auth"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["batch"],
@@ -34,7 +62,15 @@ export default {
{
apiGroups: ["coordination.k8s.io"],
resources: ["leases"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
],
},
@@ -67,8 +103,21 @@ export default {
},
{
apiGroups: [""],
resources: ["services", "configmaps", "secrets", "persistentvolumeclaims"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
resources: [
"services",
"configmaps",
"secrets",
"persistentvolumeclaims",
],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: [""],
@@ -82,28 +131,73 @@ export default {
},
{
apiGroups: ["apps"],
resources: ["deployments", "replicasets", "statefulsets", "daemonsets"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
resources: [
"deployments",
"replicasets",
"statefulsets",
"daemonsets",
],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["batch"],
resources: ["jobs", "cronjobs"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["networking.k8s.io"],
resources: ["ingresses", "networkpolicies"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["autoscaling"],
resources: ["horizontalpodautoscalers"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["policy"],
resources: ["poddisruptionbudgets"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["storage.k8s.io"],
@@ -113,7 +207,15 @@ export default {
{
apiGroups: ["traefik.io"],
resources: ["ingressroutes"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["postgresql.cnpg.io"],
@@ -123,12 +225,34 @@ export default {
{
apiGroups: ["postgresql.cnpg.io"],
resources: ["databases"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["garage.rajsingh.info"],
resources: ["garagebuckets", "garagekeys"],
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"],
verbs: [
"get",
"list",
"watch",
"create",
"update",
"patch",
"delete",
],
},
{
apiGroups: ["rbac.authorization.k8s.io"],
resources: ["clusterroles", "clusterrolebindings"],
resourceNames: ["kuber-server-manager"],
verbs: ["get", "update", "patch"],
},
],
},