gistfile1.txt

- kind: ClusterRole
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: ci-image-stream-view
  rules:
  - apiGroups: ["image.openshift.io"]
    resources: ["imagestreams", "imagestreamtags", "imagestreamimages"]
    verbs: ["get", "list"]
- kind: RoleBinding
  apiVersion: rbac.authorization.k8s.io/v1beta1
  metadata:
    name: anonymous-users-to-get-images
    namespace: openshift
  subjects:
  - kind: Group
    apiGroup: rbac.authorization.k8s.io
    name: system:unauthenticated
  roleRef:
    kind: ClusterRole
    apiGroup: rbac.authorization.k8s.io
    name: ci-image-stream-view

- kind: ClusterRole
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: ci-image-stream-view-release-tools
  rules:
  - apiGroups: ["image.openshift.io"]
    resources: ["imagestreams", "imagestreamtags", "imagestreamimages"]
    verbs: ["get", "list"]
    resourceNames: ["clonerefs"]
- kind: RoleBinding
  apiVersion: rbac.authorization.k8s.io/v1beta1
  metadata:
    name: anonymous-users-to-get-images
    namespace: ci
  subjects:
  - kind: Group
    apiGroup: rbac.authorization.k8s.io
    name: system:unauthenticated
  roleRef:
    kind: ClusterRole
    apiGroup: rbac.authorization.k8s.io
    name: ci-image-stream-view-release-tools