pkg/

+kubebuilder:object:root=true +kubebuilder:resource:scope=Cluster +kubebuilder:rbac:groups=gcpauth.nuxeo.io,resources=profiles,verbs=get;list;watch;create;update;patch;delete +kubebuilder:rbac:groups=gcpauth.nuxeo.io,resources=profiles/status,verbs=get;update;patch +kubebuilder:rbac:groups="",resources=secrets,verbs=* +kubebuilder:rbac:groups="",resources=namespaces,verbs=get;list;watch +kubebuilder:webhook:versions={v1,v1beta1},groups=gcpauth.nuxeo.io,resources=serviceaccounts,verbs="CREATE",name=gcpauthpolicy,path=/mutate-v1-serviceaccounts,mutating=true,failurePolicy=Ignore

+kubebuilder:object:root=true +kubebuilder:resource:scope=Cluster +kubebuilder:rbac:groups=gcpworkload.policies.nuxeo.io,resources=profiles,verbs=get;list;watch;create;update;patch;delete +kubebuilder:rbac:groups=gcpworkload.policies.nuxeo.io,resources=profiles/status,verbs=get;update;patch +kubebuilder:rbac:groups="iam.cnrm.cloud.google.com",resources=iampolicymembers,verbs=list;get;create;watch +kubebuilder:rbac:groups="",resources=namespaces,verbs=get;list;watch +kubebuilder:rbac:groups="",resources=serviceaccounts,verbs=list;patch;watch +kubebuilder:webhook:versions={v1,v1beta1},groups=gcpworkload.policies.nuxeo.io,resources=serviceaccounts,verbs="CREATE",name=gcpworkload.policy,path=/mutate-v1-serviceaccounts,mutating=true,failurePolicy=Ignore

+k8s:deepcopy-gen=package,register +kubebuilder:object:generate=true +versionName=v1alpha1

+kubebuilder:object:root=true +kubebuilder:resource:scope=Cluster +kubebuilder:rbac:groups=node.policies.nuxeo.io,resources=profiles,verbs=get;list;watch;create;update;patch;delete +kubebuilder:rbac:groups=node.policies.nuxeo.io,resources=profiles/status,verbs=get;update;patch +kubebuilder:rbac:groups="",resources=namespaces,verbs=get;list;watch +kubebuilder:webhook:name=node.policy,versions={v1,v1beta1},groups=node.policies.nuxeo.io,resources=pods,verbs="CREATE",path=/mutate-v1-pods,mutating=true,failurePolicy=Ignore