RBAC.yaml 957 B

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950
  1. apiVersion: v1
  2. kind: ServiceAccount
  3. metadata:
  4. name: {{ include "deepflow.fullname" . }}-server
  5. ---
  6. kind: Role
  7. apiVersion: rbac.authorization.k8s.io/v1
  8. metadata:
  9. name: {{ include "deepflow.fullname" . }}-server
  10. namespace: {{ .Release.Namespace }}
  11. rules:
  12. - apiGroups:
  13. - ""
  14. resources:
  15. - endpoints
  16. - services
  17. verbs:
  18. - list
  19. - get
  20. - watch
  21. - create
  22. - update
  23. - apiGroups:
  24. - ""
  25. resources:
  26. - pods
  27. verbs:
  28. - list
  29. - get
  30. - watch
  31. - apiGroups:
  32. - coordination.k8s.io
  33. resources:
  34. - leases
  35. verbs:
  36. - '*'
  37. ---
  38. kind: RoleBinding
  39. apiVersion: rbac.authorization.k8s.io/v1
  40. metadata:
  41. name: {{ include "deepflow.fullname" . }}-server
  42. subjects:
  43. - kind: ServiceAccount
  44. name: {{ include "deepflow.fullname" . }}-server
  45. namespace: {{ .Release.Namespace }}
  46. apiGroup: ""
  47. roleRef:
  48. kind: Role
  49. name: {{ include "deepflow.fullname" . }}-server
  50. apiGroup: ""