csi-mock-rbac.yaml 1.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475
  1. apiVersion: v1
  2. kind: ServiceAccount
  3. metadata:
  4. name: csi-mock
  5. ---
  6. kind: ClusterRoleBinding
  7. apiVersion: rbac.authorization.k8s.io/v1
  8. metadata:
  9. name: csi-controller-attacher-role
  10. subjects:
  11. - kind: ServiceAccount
  12. name: csi-mock
  13. namespace: default
  14. roleRef:
  15. kind: ClusterRole
  16. name: external-attacher-runner
  17. apiGroup: rbac.authorization.k8s.io
  18. ---
  19. kind: ClusterRoleBinding
  20. apiVersion: rbac.authorization.k8s.io/v1
  21. metadata:
  22. name: csi-controller-provisioner-role
  23. subjects:
  24. - kind: ServiceAccount
  25. name: csi-mock
  26. namespace: default
  27. roleRef:
  28. kind: ClusterRole
  29. name: external-provisioner-runner
  30. apiGroup: rbac.authorization.k8s.io
  31. ---
  32. kind: ClusterRoleBinding
  33. apiVersion: rbac.authorization.k8s.io/v1
  34. metadata:
  35. name: csi-controller-cluster-driver-registrar-role
  36. subjects:
  37. - kind: ServiceAccount
  38. name: csi-mock
  39. namespace: default
  40. roleRef:
  41. kind: ClusterRole
  42. name: cluster-driver-registrar-runner
  43. apiGroup: rbac.authorization.k8s.io
  44. ---
  45. # priviledged Pod Security Policy, previously defined via PrivilegedTestPSPClusterRoleBinding()
  46. kind: ClusterRoleBinding
  47. apiVersion: rbac.authorization.k8s.io/v1
  48. metadata:
  49. name: psp-csi-controller-driver-registrar-role
  50. subjects:
  51. - kind: ServiceAccount
  52. name: csi-mock
  53. namespace: default
  54. roleRef:
  55. kind: ClusterRole
  56. name: e2e-test-privileged-psp
  57. apiGroup: rbac.authorization.k8s.io
  58. ---
  59. kind: ClusterRoleBinding
  60. apiVersion: rbac.authorization.k8s.io/v1
  61. metadata:
  62. name: csi-controller-resizer-role
  63. subjects:
  64. - kind: ServiceAccount
  65. name: csi-mock
  66. namespace: default
  67. roleRef:
  68. kind: ClusterRole
  69. name: external-resizer-runner
  70. apiGroup: rbac.authorization.k8s.io