1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: am-webhook
5rules:
6- resources:
7 - pods
8 apiGroups:
9 - ""
10 verbs:
11 - delete
12 - get
13- resources:
14 - daemonsets
15 apiGroups:
16 - apps
17 verbs:
18 - get
19 - patch
20---
21apiVersion: rbac.authorization.k8s.io/v1
22kind: ClusterRoleBinding
23metadata:
24 name: am-webhook
25roleRef:
26 name: am-webhook
27 kind: ClusterRole
28 apiGroup: rbac.authorization.k8s.io
29subjects:
30- name: am-webhook
31 kind: ServiceAccount
View as plain text