|
@ -3,7 +3,7 @@ |
|
|
kind: ClusterRole |
|
|
kind: ClusterRole |
|
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
|
metadata: |
|
|
metadata: |
|
|
name: seaweefds-rw-cr |
|
|
|
|
|
|
|
|
name: seaweedfs-rw-cr |
|
|
rules: |
|
|
rules: |
|
|
- apiGroups: [""] |
|
|
- apiGroups: [""] |
|
|
resources: ["pods"] |
|
|
resources: ["pods"] |
|
@ -12,18 +12,18 @@ rules: |
|
|
apiVersion: v1 |
|
|
apiVersion: v1 |
|
|
kind: ServiceAccount |
|
|
kind: ServiceAccount |
|
|
metadata: |
|
|
metadata: |
|
|
name: seaweefds-rw-sa |
|
|
|
|
|
|
|
|
name: seaweedfs-rw-sa |
|
|
namespace: {{ .Release.Namespace }} |
|
|
namespace: {{ .Release.Namespace }} |
|
|
--- |
|
|
--- |
|
|
kind: ClusterRoleBinding |
|
|
kind: ClusterRoleBinding |
|
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
|
apiVersion: rbac.authorization.k8s.io/v1 |
|
|
metadata: |
|
|
metadata: |
|
|
name: system:serviceaccount:seaweefds-rw-sa:default |
|
|
|
|
|
|
|
|
name: system:serviceaccount:seaweedfs-rw-sa:default |
|
|
subjects: |
|
|
subjects: |
|
|
- kind: ServiceAccount |
|
|
- kind: ServiceAccount |
|
|
name: seaweefds-rw-sa |
|
|
|
|
|
|
|
|
name: seaweedfs-rw-sa |
|
|
namespace: {{ .Release.Namespace }} |
|
|
namespace: {{ .Release.Namespace }} |
|
|
roleRef: |
|
|
roleRef: |
|
|
apiGroup: rbac.authorization.k8s.io |
|
|
apiGroup: rbac.authorization.k8s.io |
|
|
kind: ClusterRole |
|
|
kind: ClusterRole |
|
|
name: seaweefds-rw-cr |
|
|
|
|
|
|
|
|
name: seaweedfs-rw-cr |