allow github concourse contributor team to rerun builds

and check resources so they could retrigger failure build on PR pipeline and check pr resource in case wanted version is not available. Note: they could also rerun any builds and check any resources by this change. Signed-off-by: Rui Yang <[email protected]>
concourse · May 11, 2020 · d849ae0 · d849ae0
1 parent 0ac641f
commit d849ae0
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/deployments/with-creds/ci/values.yaml b/deployments/with-creds/ci/values.yaml
@@ -87,6 +87,27 @@ concourse:
             team: concourse:Pivotal
         github:
           enabled: true
+      # so pipeline-operator ended up with two permissions
+      # - RerunJobBuild
+      # - CheckResource
+      # which will be granted to concourse:contributors for
+      # operating PR pipeline
+      configRBAC: |
+        member:
+        - AbortBuild
+        - CreateJobBuild
+        - PauseJob
+        - UnpauseJob
+        - ClearTaskCache
+        - UnpinResource
+        - SetPinCommentOnResource
+        - CheckResourceWebHook
+        - CheckResourceType
+        - EnableResourceVersion
+        - DisableResourceVersion
+        - PinResourceVersion
+        - PausePipeline
+        - UnpausePipeline
       bindPort: 80
       clusterName: ci
       containerPlacementStrategy: limit-active-tasks