1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: ingress-controller
5rules:
6- resources:
7 - configmaps
8 apiGroups:
9 - ""
10 verbs:
11 - get
12 - list
13 - watch
14- resources:
15 - nodes
16 apiGroups:
17 - ""
18 verbs:
19 - get
20 - list
21 - watch
22- resources:
23 - services
24 apiGroups:
25 - ""
26 verbs:
27 - get
28 - list
29 - patch
30 - watch
31- resources:
32 - ienodes
33 apiGroups:
34 - dsds.edge.ncr.com
35 verbs:
36 - get
37 - list
38 - watch
39- resources:
40 - listeners
41 - tcpmappings
42 apiGroups:
43 - getambassador.io
44 verbs:
45 - get
46 - list
47 - watch
48- resources:
49 - authorizationpolicies
50 - servers
51 apiGroups:
52 - policy.linkerd.io
53 verbs:
54 - get
55 - list
56 - watch
57---
58apiVersion: rbac.authorization.k8s.io/v1
59kind: Role
60metadata:
61 name: ingress-controller
62 namespace: emissary
63rules:
64- resources:
65 - services
66 apiGroups:
67 - ""
68 verbs:
69 - create
70 - delete
71- resources:
72 - listeners
73 apiGroups:
74 - getambassador.io
75 verbs:
76 - create
77 - delete
78 - patch
79- resources:
80 - authorizationpolicies
81 - servers
82 apiGroups:
83 - policy.linkerd.io
84 verbs:
85 - create
86 - delete
87 - patch
88 - update
View as plain text