Add a suse:caasp:tiller-user ClusterRole
This role represents the minimum RBAC requirements needed to make use of
Helm's Tiller service.
@@ -21,6 +21,25 @@ roleRef:
name: cluster-admin
apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+ name: suse:caasp:tiller-user
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - pods/portforward
+ verbs:
+ - create
+- apiGroups:
+ - ""
+ resources:
+ - pods
+ verbs:
+ - list
+
---
apiVersion: apps/v1beta2
kind: Deployment
