1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: kpower
5 labels:
6 platform.edge.ncr.com/component: kpower
7rules:
8- resources: ["nodes"]
9 apiGroups: [""]
10 verbs: ["get", "patch", "list"]
11- resources: ["pods"]
12 apiGroups: [""]
13 verbs: ["list", "get"]
14- resources: ["pods/eviction"]
15 apiGroups: [""]
16 verbs: ["create"]
17- resources: ["daemonsets"]
18 apiGroups: ["apps"]
19 verbs: ["get"]
20---
21apiVersion: rbac.authorization.k8s.io/v1
22kind: Role
23metadata:
24 name: kpower
25 namespace: kpower
26 labels:
27 platform.edge.ncr.com/component: kpower
28rules:
29- resources: ["daemonsets"]
30 apiGroups: ["apps"]
31 resourceNames: ["kpower"]
32 verbs: ["update", "get", "watch"]
View as plain text