serviceaccount.yaml 729 B

1234567891011121314151617181920212223242526272829303132333435
  1. {{ include "common.serviceaccount" . | nindent 0 }}
  2. ---
  3. apiVersion: rbac.authorization.k8s.io/v1
  4. kind: RoleBinding
  5. metadata:
  6. name: "{{ .Release.Name }}-service-account-role-binding"
  7. subjects:
  8. - kind: ServiceAccount
  9. name: "{{ template "common.names.serviceAccountName" . }}"
  10. namespace: {{ .Release.Namespace }}
  11. roleRef:
  12. kind: Role
  13. name: "{{ .Release.Name }}-service-account-role"
  14. apiGroup: rbac.authorization.k8s.io
  15. ---
  16. apiVersion: rbac.authorization.k8s.io/v1
  17. kind: Role
  18. metadata:
  19. name: "{{ .Release.Name }}-service-account-role"
  20. namespace: {{ .Release.Namespace }}
  21. rules:
  22. - apiGroups:
  23. - ""
  24. - "apps"
  25. resources:
  26. - pods
  27. - deployments
  28. verbs:
  29. - delete
  30. - get
  31. - list