initial commit for harvester pcidevices charts

charts/harvester-pcidevices-roles/Chart.yaml

@@ -0,0 +1,26 @@
+apiVersion: v2
+name: harvester-pcidevices-roles
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "0.1.0"
+maintainers:
+- name: harvester

charts/harvester-pcidevices-roles/templates/harvester-pcidevices-admin.yaml

@@ -0,0 +1,45 @@
+apiVersion: management.cattle.io/v3
+builtin: false
+context: cluster
+description: "Harvester PCIDevices Admin can manage all device resources on downstream Harvester cluster"
+displayName: Harvester PCIDevices ReadOnly Role
+external: false
+hidden: false
+kind: RoleTemplate
+metadata:
+  name: harvester-pcidevices-readonly
+rules:
+- apiGroups:
+  - devices.harvesterhci.io
+  resources:
+  - pcidevices
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - devices.harvesterhci.io
+  resources:
+  - pcideviceclaims
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - harvesterhci.io
+  resources:
+  - addons
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - devices.harvesterhci.io
+  resources:
+  - sriovgpudevices
+  - vgpudevices
+  - sriovnetworkdevices
+  verbs:
+  - get
+  - list
+  - watch

charts/harvester-pcidevices-roles/templates/harvester-pcidevices-readonly.yaml

@@ -0,0 +1,45 @@
+apiVersion: management.cattle.io/v3
+builtin: false
+context: cluster
+description: "Harvester PCIDevices Read Only can view device resources on downstream Harvester cluster"
+displayName: Harvester PCIDevices Admin Role
+external: false
+hidden: false
+kind: RoleTemplate
+metadata:
+  name: harvester-pcidevices-admin
+rules:
+- apiGroups:
+  - devices.harvesterhci.io
+  resources:
+  - pcidevices
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - devices.harvesterhci.io
+  resources:
+  - pcideviceclaims
+  verbs:
+  - '*'
+- apiGroups:
+  - harvesterhci.io
+  resources:
+  - addons
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - devices.harvesterhci.io
+  resources:
+  - sriovgpudevices
+  - vgpudevices
+  - sriovnetworkdevices
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch