mirror of
https://github.com/labring/FastGPT.git
synced 2026-05-07 01:02:55 +08:00
Archer
567d408158
* action * action * action * build: integrate OpenSandbox as Agent Execution Sandbox (#6490) * Update action (#6571) * action * action * action * action * action * build: integrate OpenSandbox as Agent Execution Sandbox # Conflicts: # deploy/args.json # deploy/dev/docker-compose.cn.yml # deploy/dev/docker-compose.yml # deploy/docker/cn/docker-compose.milvus.yml # deploy/docker/cn/docker-compose.oceanbase.yml # deploy/docker/cn/docker-compose.pg.yml # deploy/docker/cn/docker-compose.seekdb.yml # deploy/docker/cn/docker-compose.zilliz.yml # deploy/docker/global/docker-compose.milvus.yml # deploy/docker/global/docker-compose.oceanbase.yml # deploy/docker/global/docker-compose.pg.yml # deploy/docker/global/docker-compose.seekdb.yml # deploy/docker/global/docker-compose.ziliiz.yml # deploy/templates/docker-compose.prod.yml # document/public/deploy/docker/cn/docker-compose.milvus.yml # document/public/deploy/docker/cn/docker-compose.oceanbase.yml # document/public/deploy/docker/cn/docker-compose.pg.yml # document/public/deploy/docker/cn/docker-compose.seekdb.yml # document/public/deploy/docker/cn/docker-compose.zilliz.yml # document/public/deploy/docker/global/docker-compose.milvus.yml # document/public/deploy/docker/global/docker-compose.oceanbase.yml # document/public/deploy/docker/global/docker-compose.pg.yml # document/public/deploy/docker/global/docker-compose.seekdb.yml # document/public/deploy/docker/global/docker-compose.ziliiz.yml * remove invalid action --------- Co-authored-by: Archer <545436317@qq.com> Co-authored-by: xqvvu <whoeverimf5@gmail.com> * action --------- Co-authored-by: chanzany <chenzhi@sangfor.com.cn> Co-authored-by: xqvvu <whoeverimf5@gmail.com>
118 lines
2.5 KiB
YAML
118 lines
2.5 KiB
YAML
{{- if .Values.rbac.create }}
|
|
{{- if .Values.extraRoles.batchsandboxEditor.enabled }}
|
|
---
|
|
# This role is provided to allow the cluster admin to help manage permissions for users.
|
|
# Grants permissions to create, update, and delete BatchSandbox resources.
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ .Values.namePrefix }}batchsandbox-editor-role
|
|
labels:
|
|
{{- include "opensandbox-controller.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- batchsandboxes
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- batchsandboxes/status
|
|
verbs:
|
|
- get
|
|
{{- end }}
|
|
|
|
{{- if .Values.extraRoles.batchsandboxViewer.enabled }}
|
|
---
|
|
# This role is provided to allow the cluster admin to help manage permissions for users.
|
|
# Grants read-only permissions for BatchSandbox resources.
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ .Values.namePrefix }}batchsandbox-viewer-role
|
|
labels:
|
|
{{- include "opensandbox-controller.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- batchsandboxes
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- batchsandboxes/status
|
|
verbs:
|
|
- get
|
|
{{- end }}
|
|
|
|
{{- if .Values.extraRoles.poolEditor.enabled }}
|
|
---
|
|
# This role is provided to allow the cluster admin to help manage permissions for users.
|
|
# Grants permissions to create, update, and delete Pool resources.
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ .Values.namePrefix }}pool-editor-role
|
|
labels:
|
|
{{- include "opensandbox-controller.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- pools
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- pools/status
|
|
verbs:
|
|
- get
|
|
{{- end }}
|
|
|
|
{{- if .Values.extraRoles.poolViewer.enabled }}
|
|
---
|
|
# This role is provided to allow the cluster admin to help manage permissions for users.
|
|
# Grants read-only permissions for Pool resources.
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ .Values.namePrefix }}pool-viewer-role
|
|
labels:
|
|
{{- include "opensandbox-controller.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- pools
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- sandbox.opensandbox.io
|
|
resources:
|
|
- pools/status
|
|
verbs:
|
|
- get
|
|
{{- end }}
|
|
{{- end }}
|