src/foundation/scripts/cni/danm/integration/manifests/netwatcher/0netwatcher_rbac.yaml

   1 # yamllint disable rule:hyphens rule:commas rule:indentation
   2 apiVersion: v1
   3 kind: ServiceAccount
   4 metadata:
   5   name: netwatcher
   6   namespace: kube-system
   7   labels:
   8       kubernetes.io/cluster-service: "true"
   9 ---
  10 apiVersion: rbac.authorization.k8s.io/v1
  11 kind: ClusterRole
  12 metadata:
  13   labels:
  14     kubernetes.io/bootstrapping: rbac-defaults
  15   name: system:netwatcher
  16 rules:
  17 - apiGroups:
  18   - "danm.k8s.io"
  19   resources:
  20   - danmnets
  21   - clusternetworks
  22   - tenantnetworks
  23   verbs:
  24   - get
  25   - list
  26   - watch
  27   - update
  28 ---
  29 apiVersion: rbac.authorization.k8s.io/v1
  30 kind: ClusterRoleBinding
  31 metadata:
  32   annotations:
  33     rbac.authorization.kubernetes.io/autoupdate: "true"
  34   labels:
  35     kubernetes.io/bootstrapping: rbac-defaults
  36   name: system:netwatcher
  37 roleRef:
  38   apiGroup: rbac.authorization.k8s.io
  39   kind: ClusterRole
  40   name: system:netwatcher
  41 subjects:
  42 - kind: ServiceAccount
  43   namespace: kube-system
  44   name: netwatcher