Include extra RBAC.
This commit is contained in:
parent
8b39dc81fc
commit
c5c196f3ee
1 changed files with 26 additions and 0 deletions
|
@ -22,6 +22,32 @@ rules:
|
|||
verbs:
|
||||
- 'create'
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: flow-schema-reader
|
||||
labels:
|
||||
app: cert-manager-webhook-dnsimple
|
||||
rules:
|
||||
- apiGroups: ["flowcontrol.apiserver.k8s.io"]
|
||||
resources: ["flowschemas", "prioritylevelconfigurations"]
|
||||
verbs: ["list", "watch"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: grant-flow-schema-permission
|
||||
labels:
|
||||
app: cert-manager-webhook-dnsimple
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: webhook-dnsimple
|
||||
namespace: cert-manager
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: flow-schema-reader
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
---
|
||||
# apiserver gets the auth-delegator role to delegate auth decisions to the core apiserver
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
|
|
Loading…
Reference in a new issue