1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: device-agent
5rules:
6- resources:
7 - nodes/status
8 apiGroups:
9 - ""
10 verbs:
11 - patch
12 - update
13- resources:
14 - nodes
15 apiGroups:
16 - ""
17 verbs:
18 - get
19 - list
20 - watch
21- resources:
22 - deviceclasses
23 - devicesets
24 - devicerules
25 apiGroups:
26 - "device-system.edge.ncr.com"
27 verbs:
28 - get
29 - list
30 - watch
31---
32apiVersion: v1
33kind: ServiceAccount
34metadata:
35 name: device-agent
36 namespace: device-system
37---
38apiVersion: rbac.authorization.k8s.io/v1
39kind: ClusterRoleBinding
40metadata:
41 name: device-agent
42roleRef:
43 name: device-agent
44 kind: ClusterRole
45 apiGroup: rbac.authorization.k8s.io
46subjects:
47- name: device-agent
48 namespace: device-system
49 kind: ServiceAccount
View as plain text