diff --git a/k8s/manifest.yaml b/k8s/manifest.yaml index ddd56e5..4c0c009 100644 --- a/k8s/manifest.yaml +++ b/k8s/manifest.yaml @@ -318,34 +318,3 @@ kind: ServiceAccount metadata: name: links namespace: apps - ---- -# Role in the ingress-nginx namespace granting read access to pod logs -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: links-log-reader - namespace: ingress-nginx -rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["list", "get"] - - apiGroups: [""] - resources: ["pods/log"] - verbs: ["get"] - ---- -# Bind the Role to the links ServiceAccount (cross-namespace) -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: links-log-reader - namespace: ingress-nginx -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: links-log-reader -subjects: - - kind: ServiceAccount - name: links - namespace: apps