Add RBAC permissions

enver · Mar 30, 2023 · 061a364 · 061a364
1 parent 2e5dc8c
commit 061a364
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/charts/re-label/templates/rbac.yaml b/charts/re-label/templates/rbac.yaml
@@ -0,0 +1,21 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "app.name" . }}-clusterrole
+rules:
+- apiGroups: [""]
+  resources: ["nodes"]
+  verbs: ["get", "list", "patch", "update", "watch"]
+---
+apiVersion: "rbac.authorization.k8s.io/v1"
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "app.name" . }}-rolebinding
+subjects:
+- kind: ServiceAccount
+  name: {{ include "app.name" . }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ include "app.name" . }}-clusterrole
+  apiGroup: rbac.authorization.k8s.io