From 565a9b0f8f89934a531aa09fd848d40cbc334a18 Mon Sep 17 00:00:00 2001
From: Shuting Zhao <shutting06@gmail.com>
Date: Mon, 11 Nov 2019 18:52:39 -0800
Subject: [PATCH] update crd

---
 definitions/install.yaml       | 48 +++++++++++++++++++++++++++
 definitions/install_debug.yaml | 59 ++++++++++++++++++++++++++++------
 2 files changed, 97 insertions(+), 10 deletions(-)

diff --git a/definitions/install.yaml b/definitions/install.yaml
index ec3c86eb87..da43ad6d82 100644
--- a/definitions/install.yaml
+++ b/definitions/install.yaml
@@ -43,6 +43,30 @@ spec:
                     required:
                     - resources
                     properties:
+                      roles:
+                        type: array
+                        items:
+                          type: string
+                      clusterRoles:
+                        type: array
+                        items:
+                          type: string
+                      subjects:
+                        type: array
+                        items:
+                          type: object
+                          required:
+                          - kind
+                          - name
+                          properties:
+                            kind:
+                              type: string
+                            apiGroup:
+                              type: string
+                            name:
+                              type: string
+                            Namespace:
+                              type: string
                       resources:
                         type: object
                         required:
@@ -85,6 +109,30 @@ spec:
                     required:
                     - resources
                     properties:
+                      roles:
+                        type: array
+                        items:
+                          type: string
+                      clusterRoles:
+                        type: array
+                        items:
+                          type: string
+                      subjects:
+                        type: array
+                        items:
+                          type: object
+                          required:
+                          - kind
+                          - name
+                          properties:
+                            kind:
+                              type: string
+                            apiGroup:
+                              type: string
+                            name:
+                              type: string
+                            Namespace:
+                              type: string
                       resources:
                         type: object
                         properties:
diff --git a/definitions/install_debug.yaml b/definitions/install_debug.yaml
index 1c183251ab..4d98402f7a 100644
--- a/definitions/install_debug.yaml
+++ b/definitions/install_debug.yaml
@@ -43,6 +43,30 @@ spec:
                     required:
                     - resources
                     properties:
+                      roles:
+                        type: array
+                        items:
+                          type: string
+                      clusterRoles:
+                        type: array
+                        items:
+                          type: string
+                      subjects:
+                        type: array
+                        items:
+                          type: object
+                          required:
+                          - kind
+                          - name
+                          properties:
+                            kind:
+                              type: string
+                            apiGroup:
+                              type: string
+                            name:
+                              type: string
+                            namespace:
+                              type: string
                       resources:
                         type: object
                         required:
@@ -85,6 +109,30 @@ spec:
                     required:
                     - resources
                     properties:
+                      roles:
+                        type: array
+                        items:
+                          type: string
+                      clusterRoles:
+                        type: array
+                        items:
+                          type: string
+                      subjects:
+                        type: array
+                        items:
+                          type: object
+                          required:
+                          - kind
+                          - name
+                          properties:
+                            kind:
+                              type: string
+                            apiGroup:
+                              type: string
+                            name:
+                              type: string
+                            Namespace:
+                              type: string
                       resources:
                         type: object
                         properties:
@@ -238,13 +286,4 @@ spec:
                       namespace:
                         type: string
                       creationBlocked:
-                        type: boolean
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: init-config
-  namespace: kyverno
-data:
-  # resource types to be skipped by kyverno policy engine
-  resourceFilters: "[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][*,kyverno,*]"
\ No newline at end of file
+                        type: boolean
\ No newline at end of file