1---
2###
3### Metrics API RBAC
4###
5kind: ClusterRole
6apiVersion: rbac.authorization.k8s.io/v1
7metadata:
8 name: linkerd-{{.Release.Namespace}}-metrics-api
9 labels:
10 linkerd.io/extension: viz
11 component: metrics-api
12 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
13rules:
14- apiGroups: ["extensions", "apps"]
15 resources: ["daemonsets", "deployments", "replicasets", "statefulsets"]
16 verbs: ["list", "get", "watch"]
17- apiGroups: ["extensions", "batch"]
18 resources: ["cronjobs", "jobs"]
19 verbs: ["list" , "get", "watch"]
20- apiGroups: [""]
21 resources: ["pods", "endpoints", "services", "replicationcontrollers", "namespaces"]
22 verbs: ["list", "get", "watch"]
23- apiGroups: ["linkerd.io"]
24 resources: ["serviceprofiles"]
25 verbs: ["list", "get", "watch"]
26- apiGroups: ["policy.linkerd.io"]
27 resources: ["servers", "serverauthorizations", "authorizationpolicies", "httproutes"]
28 verbs: ["list", "get"]
29---
30kind: ClusterRoleBinding
31apiVersion: rbac.authorization.k8s.io/v1
32metadata:
33 name: linkerd-{{.Release.Namespace}}-metrics-api
34 labels:
35 linkerd.io/extension: viz
36 component: metrics-api
37 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
38roleRef:
39 apiGroup: rbac.authorization.k8s.io
40 kind: ClusterRole
41 name: linkerd-{{.Release.Namespace}}-metrics-api
42subjects:
43- kind: ServiceAccount
44 name: metrics-api
45 namespace: {{.Release.Namespace}}
46---
47kind: ServiceAccount
48apiVersion: v1
49metadata:
50 name: metrics-api
51 namespace: {{ .Release.Namespace }}
52 labels:
53 linkerd.io/extension: viz
54 component: metrics-api
55 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
56{{- include "partials.image-pull-secrets" .Values.imagePullSecrets }}
View as plain text