blob: 762cb775c44dcb8c0c6b2639f1b5c1b72351cdd7 [file] [log] [blame]
Wei-Yu Chen450a98a2019-01-15 16:56:30 -08001---
2# Copyright 2017-present Open Networking Foundation
3#
4# Licensed under the Apache License, Version 2.0 (the "License");
5# you may not use this file except in compliance with the License.
6# You may obtain a copy of the License at
7#
8# http://www.apache.org/licenses/LICENSE-2.0
9#
10# Unless required by applicable law or agreed to in writing, software
11# distributed under the License is distributed on an "AS IS" BASIS,
12# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13# See the License for the specific language governing permissions and
14# limitations under the License.
15
16---
17kind: ClusterRole
18apiVersion: rbac.authorization.k8s.io/v1beta1
19metadata:
20 name: pod-networks-operator
21rules:
22- apiGroups:
23 - '*'
24 resources:
25 - '*'
26 verbs:
27 - '*'
28- nonResourceURLs:
29 - '*'
30 verbs:
31 - '*'
Wei-Yu Chenb92af452019-01-31 12:08:19 -080032#- apiGroups: [""]
33# resources: ["pods"]
34# verbs: ["get"]
35#- apiGroups: [""]
36# resources: ["pods/status"]
37# verbs: ["update"]
38#- apiGroups: ["k8s.cni.cncf.io"]
39# resources: ["*"]
40# verbs: ["get"]
Wei-Yu Chen450a98a2019-01-15 16:56:30 -080041---
42apiVersion: v1
43kind: ServiceAccount
44metadata:
Wei-Yu Chenb92af452019-01-31 12:08:19 -080045 name: multus-sa
Wei-Yu Chen450a98a2019-01-15 16:56:30 -080046 namespace: kube-system
47---
Wei-Yu Chenb92af452019-01-31 12:08:19 -080048apiVersion: v1
49kind: Secret
Wei-Yu Chen450a98a2019-01-15 16:56:30 -080050metadata:
Wei-Yu Chenb92af452019-01-31 12:08:19 -080051 name: multus-sa-secret
52 namespace: kube-system
53 annotations:
54 kubernetes.io/service-account.name: multus-sa
55type: kubernetes.io/service-account-token
56---
57kind: ClusterRoleBinding
58apiVersion: rbac.authorization.k8s.io/v1
59metadata:
60 name: multus-rb
Wei-Yu Chen450a98a2019-01-15 16:56:30 -080061roleRef:
62 apiGroup: rbac.authorization.k8s.io
63 kind: ClusterRole
64 name: pod-networks-operator
65subjects:
66- kind: ServiceAccount
Wei-Yu Chenb92af452019-01-31 12:08:19 -080067 name: multus-sa
Wei-Yu Chen450a98a2019-01-15 16:56:30 -080068 namespace: kube-system