ITQ/submariner-charts
1
0
Fork 0
mirror of https://github.com/submariner-io/submariner-charts.git synced 2026-09-22 02:40:35 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #21 from sridhargaddam/route-agent-get-nodes

Browse Source 
Add ClusterRole for route-agent to annotate a node
This commit is contained in:
Miguel Angel Ajo Pelayo
2020-04-13 16:36:50 +02:00
committed by GitHub
parent 8fa5ec5c03 ae121cfdc4
commit 8213fe55f0
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
submariner/templates/rbac.yaml
+22
View File
@@ -62,6 +62,28 @@ subjects:
name: {{ template "submariner.routeAgentServiceAccountName" . }} name: {{ template "submariner.routeAgentServiceAccountName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
--- ---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: {{ template "submariner.fullname" . }}:routeagent
rules:
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get", "update"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: {{ template "submariner.fullname" . }}:routeagent
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{ template "submariner.fullname" . }}:routeagent
subjects:
- kind: ServiceAccount
name: {{ template "submariner.routeAgentServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
---
{{- if ne .Values.submariner.globalCidr "" }} {{- if ne .Values.submariner.globalCidr "" }}
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole