deploy/kata/base/kata-rbac.yaml

   1 ---
   2 apiVersion: v1
   3 kind: ServiceAccount
   4 metadata:
   5   name: kata-label-node
   6   namespace: kube-system
   7 ---
   8 kind: ClusterRole
   9 apiVersion: rbac.authorization.k8s.io/v1
  10 metadata:
  11   name: node-labeler
  12 rules:
  13 - apiGroups: [""]
  14   resources: ["nodes"]
  15   verbs: ["get", "patch"]
  16 ---
  17 kind: ClusterRoleBinding
  18 apiVersion: rbac.authorization.k8s.io/v1
  19 metadata:
  20   name: kata-label-node-rb
  21 roleRef:
  22   apiGroup: rbac.authorization.k8s.io
  23   kind: ClusterRole
  24   name: node-labeler
  25 subjects:
  26 - kind: ServiceAccount
  27   name: kata-label-node
  28   namespace: kube-system
  29