1apiVersion: v1
2kind: ServiceAccount
3metadata:
4 name: wireguardctl
5 namespace: vpn
6---
7apiVersion: rbac.authorization.k8s.io/v1
8kind: ClusterRoleBinding
9metadata:
10 name: wireguardctl-rb
11roleRef:
12 name: wireguardctl
13 kind: ClusterRole
14 apiGroup: rbac.authorization.k8s.io
15subjects:
16- name: wireguardctl
17 namespace: vpn
18 kind: ServiceAccount
19---
20apiVersion: rbac.authorization.k8s.io/v1
21kind: ClusterRole
22metadata:
23 name: wireguardctl
24 labels:
25 platform.edge.ncr.com/component: 'wireguardctl'
26rules:
27- resources:
28 - secrets
29 apiGroups:
30 - ""
31 verbs:
32 - get
33 - list
34 - watch
35 - patch
36 - update
37 - create
38 - delete
39- resources:
40 - configmaps
41 apiGroups:
42 - ""
43 verbs:
44 - get
45 - list
46 - watch
47- resources:
48 - deployments
49 apiGroups:
50 - apps
51 verbs:
52 - get
53 - list
54 - watch
55 - patch
56 - update
57 - create
58- resources:
59 - pods
60 apiGroups:
61 - ""
62 verbs:
63 - get
64 - list
65 - watch
66 - delete
67- resources:
68 - pods/exec
69 apiGroups:
70 - ""
71 verbs:
72 - create
73- resources:
74 - clusters
75 apiGroups:
76 - edge.ncr.com
77 verbs:
78 - get
79 - list
80 - watch
81- resources:
82 - clusters/status
83 apiGroups:
84 - edge.ncr.com
85 verbs:
86 - get
87 - list
88 - watch
89- resources:
90 - customresourcedefinitions
91 apiGroups:
92 - apiextensions.k8s.io
93 verbs:
94 - get
95 - list
96 - watch
97- resources:
98 - vpnconfigs
99 apiGroups:
100 - remoteaccess.edge.ncr.com
101 verbs:
102 - get
103 - list
104 - watch
105 - patch
106 - update
107- resources:
108 - vpnconfigs/status
109 apiGroups:
110 - remoteaccess.edge.ncr.com
111 verbs:
112 - get
113 - list
114 - watch
115 - patch
116 - update
117- resources:
118 - syncedobjects
119 apiGroups:
120 - edge.ncr.com
121 verbs:
122 - get
123 - list
124 - watch
125 - create
126 - update
127 - patch
128 - delete
129- resources:
130 - services
131 apiGroups:
132 - ""
133 verbs:
134 - get
135 - list
136 - watch
137- resources:
138 - hosts
139 apiGroups:
140 - getambassador.io
141 verbs:
142 - get
143 - list
144 - watch
145- resources:
146 - mappings
147 apiGroups:
148 - getambassador.io
149 verbs:
150 - get
151 - list
152 - watch
153 - create
154 - update
155 - patch
156 - delete
157- resources:
158 - iampolicymembers
159 apiGroups:
160 - iam.cnrm.cloud.google.com
161 verbs:
162 - create
163 - delete
164 - get
165 - list
166 - patch
167 - update
168 - watch
169- resources:
170 - iampolicymembers/status
171 apiGroups:
172 - iam.cnrm.cloud.google.com
173 verbs:
174 - get
175 - watch
View as plain text