mirror of https://github.com/k3s-io/k3s
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
91 lines
1.5 KiB
91 lines
1.5 KiB
apiVersion: rbac.authorization.k8s.io/v1 |
|
kind: ClusterRoleBinding |
|
metadata: |
|
name: kube-apiserver-kubelet-admin |
|
roleRef: |
|
apiGroup: rbac.authorization.k8s.io |
|
kind: ClusterRole |
|
name: system:kubelet-api-admin |
|
subjects: |
|
- apiGroup: rbac.authorization.k8s.io |
|
kind: User |
|
name: kube-apiserver |
|
|
|
--- |
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
kind: ClusterRole |
|
metadata: |
|
name: system:k3s-controller |
|
rules: |
|
- apiGroups: |
|
- "" |
|
resources: |
|
- nodes |
|
verbs: |
|
- get |
|
- apiGroups: |
|
- "" |
|
resources: |
|
- namespaces |
|
verbs: |
|
- list |
|
- watch |
|
- apiGroups: |
|
- "networking.k8s.io" |
|
resources: |
|
- networkpolicies |
|
- clustercidrs |
|
verbs: |
|
- list |
|
- watch |
|
- apiGroups: |
|
- "" |
|
resources: |
|
- endpoints |
|
- pods |
|
verbs: |
|
- list |
|
- get |
|
- watch |
|
|
|
--- |
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
kind: ClusterRoleBinding |
|
metadata: |
|
name: system:k3s-controller |
|
roleRef: |
|
apiGroup: rbac.authorization.k8s.io |
|
kind: ClusterRole |
|
name: system:k3s-controller |
|
subjects: |
|
- apiGroup: rbac.authorization.k8s.io |
|
kind: User |
|
name: system:k3s-controller |
|
|
|
--- |
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
kind: ClusterRole |
|
metadata: |
|
name: clustercidrs-node |
|
rules: |
|
- apiGroups: |
|
- networking.k8s.io |
|
resources: |
|
- clustercidrs |
|
verbs: |
|
- list |
|
- watch |
|
|
|
--- |
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
kind: ClusterRoleBinding |
|
metadata: |
|
name: clustercidrs-node |
|
roleRef: |
|
apiGroup: rbac.authorization.k8s.io |
|
kind: ClusterRole |
|
name: clustercidrs-node |
|
subjects: |
|
- kind: Group |
|
name: system:nodes |
|
apiGroup: rbac.authorization.k8s.io
|
|
|