1{{ if not .Values.disableHeartBeat -}}
2---
3###
4### Heartbeat RBAC
5###
6apiVersion: rbac.authorization.k8s.io/v1
7kind: Role
8metadata:
9 name: linkerd-heartbeat
10 namespace: {{ .Release.Namespace }}
11 labels:
12 linkerd.io/control-plane-ns: {{.Release.Namespace}}
13 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
14rules:
15- apiGroups: [""]
16 resources: ["configmaps"]
17 verbs: ["get"]
18 resourceNames: ["linkerd-config"]
19---
20apiVersion: rbac.authorization.k8s.io/v1
21kind: RoleBinding
22metadata:
23 name: linkerd-heartbeat
24 namespace: {{ .Release.Namespace }}
25 labels:
26 linkerd.io/control-plane-ns: {{.Release.Namespace}}
27 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
28roleRef:
29 kind: Role
30 name: linkerd-heartbeat
31 apiGroup: rbac.authorization.k8s.io
32subjects:
33- kind: ServiceAccount
34 name: linkerd-heartbeat
35 namespace: {{.Release.Namespace}}
36---
37apiVersion: rbac.authorization.k8s.io/v1
38kind: ClusterRole
39metadata:
40 name: linkerd-heartbeat
41 labels:
42 linkerd.io/control-plane-ns: {{.Release.Namespace}}
43 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
44rules:
45- apiGroups: [""]
46 resources: ["namespaces"]
47 verbs: ["list"]
48- apiGroups: ["linkerd.io"]
49 resources: ["serviceprofiles"]
50 verbs: ["list"]
51---
52apiVersion: rbac.authorization.k8s.io/v1
53kind: ClusterRoleBinding
54metadata:
55 name: linkerd-heartbeat
56 labels:
57 linkerd.io/control-plane-ns: {{.Release.Namespace}}
58 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
59roleRef:
60 kind: ClusterRole
61 name: linkerd-heartbeat
62 apiGroup: rbac.authorization.k8s.io
63subjects:
64- kind: ServiceAccount
65 name: linkerd-heartbeat
66 namespace: {{.Release.Namespace}}
67---
68kind: ServiceAccount
69apiVersion: v1
70metadata:
71 name: linkerd-heartbeat
72 namespace: {{ .Release.Namespace }}
73 labels:
74 linkerd.io/control-plane-component: heartbeat
75 linkerd.io/control-plane-ns: {{.Release.Namespace}}
76 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
77{{- include "partials.image-pull-secrets" .Values.imagePullSecrets }}
78{{- end }}
View as plain text