metadata-agent-rbac.yaml 685 B

123456789101112131415161718192021222324252627282930313233
  1. apiVersion: rbac.authorization.k8s.io/v1
  2. kind: ClusterRole
  3. metadata:
  4. name: stackdriver:metadata-agent
  5. labels:
  6. kubernetes.io/cluster-service: "true"
  7. addonmanager.kubernetes.io/mode: Reconcile
  8. rules:
  9. - apiGroups:
  10. - "*"
  11. resources:
  12. - "*"
  13. verbs:
  14. - watch
  15. - get
  16. - list
  17. ---
  18. apiVersion: rbac.authorization.k8s.io/v1
  19. kind: ClusterRoleBinding
  20. metadata:
  21. name: stackdriver:metadata-agent
  22. labels:
  23. kubernetes.io/cluster-service: "true"
  24. addonmanager.kubernetes.io/mode: Reconcile
  25. roleRef:
  26. apiGroup: rbac.authorization.k8s.io
  27. kind: ClusterRole
  28. name: stackdriver:metadata-agent
  29. subjects:
  30. - kind: ServiceAccount
  31. name: metadata-agent
  32. namespace: kube-system