Files
2026-06-23 13:29:29 -04:00

277 lines
3.8 KiB
YAML

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: kserve-llmisvc-manager-role
rules:
- nonResourceURLs:
- /metrics
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- update
- apiGroups:
- ""
resources:
- secrets
- serviceaccounts
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apiextensions.k8s.io
resourceNames:
- llminferenceserviceconfigs.serving.kserve.io
- llminferenceservices.serving.kserve.io
resources:
- customresourcedefinitions
verbs:
- get
- list
- watch
- apiGroups:
- apiextensions.k8s.io
resourceNames:
- llminferenceserviceconfigs.serving.kserve.io
- llminferenceservices.serving.kserve.io
resources:
- customresourcedefinitions/status
verbs:
- patch
- update
- apiGroups:
- apps
resources:
- deployments
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- authentication.k8s.io
resources:
- subjectaccessreviews
- tokenreviews
verbs:
- create
- apiGroups:
- authorization.k8s.io
resources:
- subjectaccessreviews
verbs:
- create
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- get
- list
- watch
- apiGroups:
- gateway.networking.k8s.io
resources:
- gatewayclasses
- gateways
- httproutes
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- inference.networking.k8s.io
resources:
- inferencemodels
- inferenceobjectives
- inferencepools
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- inference.networking.x-k8s.io
resources:
- inferencemodelrewrites
- inferencemodels
- inferenceobjectives
- inferencepoolimports
- inferencepools
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- keda.sh
resources:
- scaledobjects
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- leaderworkerset.x-k8s.io
resources:
- leaderworkersets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- llmd.ai
resources:
- variantautoscalings
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterrolebindings
- rolebindings
- roles
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- resource.k8s.io
resources:
- resourceclaims
- resourceclaimtemplates
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- serving.kserve.io
resources:
- llminferenceserviceconfigs
- llminferenceservices
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- serving.kserve.io
resources:
- llminferenceserviceconfigs/finalizers
- llminferenceservices/finalizers
verbs:
- update
- apiGroups:
- serving.kserve.io
resources:
- llminferenceserviceconfigs/status
- llminferenceservices/status
verbs:
- get
- patch
- update
- apiGroups:
- serving.kserve.io
resources:
- localmodelcaches
- localmodelnamespacecaches
verbs:
- get
- list
- watch