mirror of
https://github.com/wahyd4/links.git
synced 2026-08-09 05:06:16 +10:00
Update
This commit is contained in:
@@ -318,34 +318,3 @@ kind: ServiceAccount
|
||||
metadata:
|
||||
name: links
|
||||
namespace: apps
|
||||
|
||||
---
|
||||
# Role in the ingress-nginx namespace granting read access to pod logs
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: links-log-reader
|
||||
namespace: ingress-nginx
|
||||
rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["pods"]
|
||||
verbs: ["list", "get"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods/log"]
|
||||
verbs: ["get"]
|
||||
|
||||
---
|
||||
# Bind the Role to the links ServiceAccount (cross-namespace)
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: links-log-reader
|
||||
namespace: ingress-nginx
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: links-log-reader
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: links
|
||||
namespace: apps
|
||||
|
||||
Reference in New Issue
Block a user