1apiVersion: v1
2kind: ServiceAccount
3metadata:
4 name: fluent-bit
5 namespace: fluent-operator
6---
7apiVersion: rbac.authorization.k8s.io/v1
8kind: ClusterRole
9metadata:
10 name: fluent-bit-read
11rules:
12- resources:
13 - namespaces
14 - pods
15 - pods/log
16 - services
17 - nodes
18 - nodes/proxy
19 apiGroups: [""]
20 verbs: ["get", "list", "watch", "update"]
21---
22apiVersion: rbac.authorization.k8s.io/v1
23kind: ClusterRoleBinding
24metadata:
25 name: fluent-bit-read
26roleRef:
27 name: fluent-bit-read
28 kind: ClusterRole
29 apiGroup: rbac.authorization.k8s.io
30subjects:
31- name: fluent-bit
32 namespace: fluent-operator
33 kind: ServiceAccount
34- name: system:serviceaccounts
35 kind: Group
36 apiGroup: rbac.authorization.k8s.io
View as plain text