1apiVersion: v1
2kind: ServiceAccount
3metadata:
4 name: dnsmasq-controller
5---
6apiVersion: rbac.authorization.k8s.io/v1
7kind: Role
8metadata:
9 name: dnsmasq-controller-leader-election
10rules:
11- resources:
12 - configmaps
13 apiGroups:
14 - ""
15 verbs:
16 - get
17 - list
18 - watch
19 - create
20 - update
21 - patch
22 - delete
23- resources:
24 - configmaps/status
25 apiGroups:
26 - ""
27 verbs:
28 - get
29 - update
30 - patch
31- resources:
32 - events
33 apiGroups:
34 - ""
35 verbs:
36 - create
37---
38apiVersion: rbac.authorization.k8s.io/v1
39kind: ClusterRole
40metadata:
41 name: dnsmasq-controller
42rules:
43- resources:
44 - dhcphosts
45 apiGroups:
46 - dnsmasq.kvaps.cf
47 verbs:
48 - get
49 - list
50 - watch
51- resources:
52 - dhcpoptions
53 apiGroups:
54 - dnsmasq.kvaps.cf
55 verbs:
56 - get
57 - list
58 - watch
59- resources:
60 - dnshosts
61 apiGroups:
62 - dnsmasq.kvaps.cf
63 verbs:
64 - get
65 - list
66 - watch
67- resources:
68 - dnsmasqoptions
69 apiGroups:
70 - dnsmasq.kvaps.cf
71 verbs:
72 - get
73 - list
74 - watch
75---
76apiVersion: rbac.authorization.k8s.io/v1
77kind: RoleBinding
78metadata:
79 name: dnsmasq-controller-leader-election
80roleRef:
81 name: dnsmasq-controller-leader-election
82 kind: Role
83 apiGroup: rbac.authorization.k8s.io
84subjects:
85- name: dnsmasq-controller
86 namespace: default
87 kind: ServiceAccount
88---
89apiVersion: rbac.authorization.k8s.io/v1
90kind: ClusterRoleBinding
91metadata:
92 name: dnsmasq-controller
93roleRef:
94 name: dnsmasq-controller
95 kind: ClusterRole
96 apiGroup: rbac.authorization.k8s.io
97subjects:
98- name: dnsmasq-controller
99 namespace: default
100 kind: ServiceAccount
View as plain text