1apiVersion: v1
2kind: ServiceAccount
3metadata:
4 name: bff-sa
5---
6apiVersion: rbac.authorization.k8s.io/v1
7kind: ClusterRoleBinding
8metadata:
9 name: bff-rolebinding
10 labels:
11 platform.edge.ncr.com/component: edge-backend
12roleRef:
13 name: bff-sa-role
14 kind: ClusterRole
15 apiGroup: rbac.authorization.k8s.io
16subjects:
17- name: bff-sa
18 namespace: edge-backend
19 kind: ServiceAccount
20---
21apiVersion: rbac.authorization.k8s.io/v1
22kind: ClusterRole
23metadata:
24 name: bff-sa-role
25 labels:
26 platform.edge.ncr.com/component: edge-backend
27rules:
28- resources: ["namespaces", "secrets", "namespaces/status"]
29 apiGroups: [""]
30 verbs: ["get", "list", "watch"]
31- resources: ["namespaces"]
32 apiGroups: [""]
33 verbs: ["create", "delete"]
View as plain text