ansible-collections/kubernetes
2
0
Fork 0
Code Issues 8 Pull Requests 1 Actions Projects Releases 28 Wiki Activity

docs: initial docs for rbac

Browse Source 
!2 #4
This commit is contained in:
Jon Lockwood
2023-10-29 14:50:19 +09:30
parent 3e785d7db1
commit bbfbbedd11
4 changed files with 46 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
templates/kubernetes-manifest-rbac.yaml.j2
View File

@ -13,7 +13,7 @@ metadata:
app.kubernetes.io/part-of: nfc_kubernetes
app.kubernetes.io/managed-by: ansible
app.kubernetes.io/version: ''
name: authorization:common:full
name: authorization:full
rules:
- apiGroups:
- "*"
@ -37,7 +37,7 @@ metadata:
app.kubernetes.io/part-of: nfc_kubernetes
app.kubernetes.io/managed-by: ansible
app.kubernetes.io/version: ''
name: authorization:common:namespace:read
name: authorization:namespace:read
rules:
- apiGroups: # Get Metrics
- metrics.k8s.io
@ -88,7 +88,7 @@ metadata:
app.kubernetes.io/part-of: nfc_kubernetes
app.kubernetes.io/managed-by: ansible
app.kubernetes.io/version: ''
name: authorization:common:namespace:owner
name: authorization:namespace:owner
rules:
- apiGroups: # Read-only access to resrouces
- "*"
@ -122,7 +122,7 @@ rules:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: authorization:common:cluster:view-metrics
name: authorization:cluster:view-metrics
rules:
- apiGroups:
- metrics.k8s.io
@ -144,7 +144,7 @@ metadata:
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: authorization:common:namespace:read
name: authorization:namespace:read
subjects:
- kind: Group
name: administrators
@ -163,7 +163,7 @@ metadata:
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: authorization:common:cluster:view-metrics
name: authorization:cluster:view-metrics
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group