diff --git a/helm-chart/kuberay-operator/templates/ray_rayjob_editor_role.yaml b/helm-chart/kuberay-operator/templates/ray_rayjob_editor_role.yaml index 0de7282..09e2b51 100644 --- a/helm-chart/kuberay-operator/templates/ray_rayjob_editor_role.yaml +++ b/helm-chart/kuberay-operator/templates/ray_rayjob_editor_role.yaml @@ -4,8 +4,9 @@ kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: - labels: {{ include "kuberay-operator.labels" . | nindent 4 }} name: rayjob-editor-role + labels: + rbac.authorization.k8s.io/aggregate-to-edit: "true" rules: - apiGroups: - ray.io diff --git a/helm-chart/kuberay-operator/templates/ray_rayjob_viewer_role.yaml b/helm-chart/kuberay-operator/templates/ray_rayjob_viewer_role.yaml index 26906b0..bf0378e 100644 --- a/helm-chart/kuberay-operator/templates/ray_rayjob_viewer_role.yaml +++ b/helm-chart/kuberay-operator/templates/ray_rayjob_viewer_role.yaml @@ -4,8 +4,9 @@ kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: - labels: {{ include "kuberay-operator.labels" . | nindent 4 }} name: rayjob-viewer-role + labels: + rbac.authorization.k8s.io/aggregate-to-view: "true" rules: - apiGroups: - ray.io diff --git a/helm-chart/kuberay-operator/templates/ray_rayservice_editor_role.yaml b/helm-chart/kuberay-operator/templates/ray_rayservice_editor_role.yaml index 1c0a695..60be960 100644 --- a/helm-chart/kuberay-operator/templates/ray_rayservice_editor_role.yaml +++ b/helm-chart/kuberay-operator/templates/ray_rayservice_editor_role.yaml @@ -4,6 +4,8 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: rayservice-editor-role + labels: + rbac.authorization.k8s.io/aggregate-to-edit: "true" rules: - apiGroups: - ray.io diff --git a/helm-chart/kuberay-operator/templates/ray_rayservice_viewer_role.yaml b/helm-chart/kuberay-operator/templates/ray_rayservice_viewer_role.yaml index 59e878f..4a29370 100644 --- a/helm-chart/kuberay-operator/templates/ray_rayservice_viewer_role.yaml +++ b/helm-chart/kuberay-operator/templates/ray_rayservice_viewer_role.yaml @@ -4,6 +4,8 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: rayservice-viewer-role + labels: + rbac.authorization.k8s.io/aggregate-to-view: "true" rules: - apiGroups: - ray.io