1apiVersion: rbac.authorization.k8s.io/v1
2kind: Role
3metadata:
4 name: emissary-ingress-apiext
5 labels:
6 app.kubernetes.io/instance: emissary-ingress
7 app.kubernetes.io/managed-by: getambassador.io
8 app.kubernetes.io/name: emissary-ingress
9 app.kubernetes.io/part-of: emissary-ingress
10 product: aes
11 rbac.getambassador.io/role-group: emissary-ingress
12rules:
13- resources:
14 - deployments
15 apiGroups:
16 - apps
17 verbs:
18 - get
19 - list
20 - watch
21---
22apiVersion: rbac.authorization.k8s.io/v1
23kind: RoleBinding
24metadata:
25 name: emissary-ingress-apiext
26 labels:
27 app.kubernetes.io/instance: emissary-ingress
28 app.kubernetes.io/managed-by: getambassador.io
29 app.kubernetes.io/name: emissary-ingress
30 app.kubernetes.io/part-of: emissary-ingress
31 product: aes
32roleRef:
33 name: emissary-ingress-apiext
34 kind: Role
35 apiGroup: rbac.authorization.k8s.io
36subjects:
37- name: emissary-ingress
38 namespace: emissary
39 kind: ServiceAccount
View as plain text