This commit is contained in:
2026-04-01 19:36:28 +11:00
parent 179702ac6d
commit 14ffb118c7
-31
View File
@@ -318,34 +318,3 @@ kind: ServiceAccount
metadata:
name: links
namespace: apps
---
# Role in the ingress-nginx namespace granting read access to pod logs
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: links-log-reader
namespace: ingress-nginx
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["list", "get"]
- apiGroups: [""]
resources: ["pods/log"]
verbs: ["get"]
---
# Bind the Role to the links ServiceAccount (cross-namespace)
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: links-log-reader
namespace: ingress-nginx
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: links-log-reader
subjects:
- kind: ServiceAccount
name: links
namespace: apps