rbac.yaml 973 B

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
  1. kind: ClusterRole
  2. apiVersion: rbac.authorization.k8s.io/v1beta1
  3. metadata:
  4. name: nginx-ingress
  5. rules:
  6. - apiGroups:
  7. - ""
  8. resources:
  9. - services
  10. - endpoints
  11. verbs:
  12. - get
  13. - list
  14. - watch
  15. - apiGroups:
  16. - ""
  17. resources:
  18. - secrets
  19. verbs:
  20. - get
  21. - list
  22. - watch
  23. - apiGroups:
  24. - ""
  25. resources:
  26. - configmaps
  27. verbs:
  28. - get
  29. - list
  30. - watch
  31. - update
  32. - create
  33. - apiGroups:
  34. - ""
  35. resources:
  36. - pods
  37. verbs:
  38. - list
  39. - apiGroups:
  40. - ""
  41. resources:
  42. - events
  43. verbs:
  44. - create
  45. - patch
  46. - apiGroups:
  47. - extensions
  48. resources:
  49. - ingresses
  50. verbs:
  51. - list
  52. - watch
  53. - get
  54. - apiGroups:
  55. - "extensions"
  56. resources:
  57. - ingresses/status
  58. verbs:
  59. - update
  60. ---
  61. kind: ClusterRoleBinding
  62. apiVersion: rbac.authorization.k8s.io/v1beta1
  63. metadata:
  64. name: nginx-ingress
  65. subjects:
  66. - kind: ServiceAccount
  67. name: nginx-ingress
  68. namespace: nginx-ingress
  69. roleRef:
  70. kind: ClusterRole
  71. name: nginx-ingress
  72. apiGroup: rbac.authorization.k8s.io