1apiVersion: v1
2kind: ServiceAccount
3metadata:
4 name: corednsctl
5 namespace: corednsctl
6---
7apiVersion: rbac.authorization.k8s.io/v1
8kind: ClusterRole
9metadata:
10 name: corednsctl
11rules:
12- resources:
13 - daemonsets
14 apiGroups:
15 - apps
16 verbs:
17 - get
18 - list
19 - watch
20 - create
21 - patch
22 - update
23 - delete
24- resources:
25 - deployments
26 apiGroups:
27 - apps
28 verbs:
29 - get
30 - list
31 - watch
32 - create
33 - patch
34 - update
35 - delete
36- resources:
37 - services
38 apiGroups:
39 - ""
40 verbs:
41 - get
42 - list
43 - watch
44 - patch
45 - update
46 - create
47- resources:
48 - configmaps
49 apiGroups:
50 - ""
51 verbs:
52 - get
53 - list
54 - watch
55---
56apiVersion: rbac.authorization.k8s.io/v1
57kind: ClusterRoleBinding
58metadata:
59 name: corednsctl
60roleRef:
61 name: corednsctl
62 kind: ClusterRole
63 apiGroup: rbac.authorization.k8s.io
64subjects:
65- name: corednsctl
66 namespace: corednsctl
67 kind: ServiceAccount
View as plain text