From a26c8c4e3dfdb85b2d31763805013d351ca6589b Mon Sep 17 00:00:00 2001 From: cloudbeed-CI Date: Mon, 1 Aug 2022 17:56:46 +0000 Subject: [PATCH] adding folder rbac updates for folder rbac lab --- bundle/bundle.yaml | 4 +++- bundle/folder.yaml | 16 ++++++++++++++++ bundle/rbac.yaml | 7 +++++++ 3 files changed, 26 insertions(+), 1 deletion(-) create mode 100644 bundle/folder.yaml diff --git a/bundle/bundle.yaml b/bundle/bundle.yaml index 181893b..2dea4aa 100644 --- a/bundle/bundle.yaml +++ b/bundle/bundle.yaml @@ -1,8 +1,10 @@ apiVersion: "1" -version: "2" +version: "3" id: "cloudbeed-CI-dev-controller" description: "CloudBees CI configuration bundle for the cloudbeed-CI dev-controller Controller" availabilityPattern: "cloudbees-ci-casc-workshop/cloudbeed-ci/dev-controller" parent: "base" rbac: - "rbac.yaml" +items: + - "folder.yaml" diff --git a/bundle/folder.yaml b/bundle/folder.yaml new file mode 100644 index 0000000..4e566fc --- /dev/null +++ b/bundle/folder.yaml @@ -0,0 +1,16 @@ +removeStrategy: + items: "none" + rbac: "sync" +items: + - kind: "folder" + name: "controller-jobs" + description: "Base controller folder for all jobs." + groups: + - name: "Job Managers" + members: + internal_groups: + - Managers + roles: + - name: "job-manager" + grantedAt: "current" + propagates: "true" diff --git a/bundle/rbac.yaml b/bundle/rbac.yaml index e6ff176..fb8fc30 100644 --- a/bundle/rbac.yaml +++ b/bundle/rbac.yaml @@ -20,6 +20,13 @@ roles: - com.cloudbees.jenkins.plugin.metrics.views.Alerter.View - nectar.plugins.rbac.groups.Group.View - nectar.plugins.rbac.roles.Role.View +- name: job-manager + filterable: 'true' + permissions: + - hudson.model.Item.Read + - hudson.model.Item.Create + - hudson.model.Item.Configure + - hudson.model.Item.Build groups: - name: Administrators members: