1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: stackdriver:metadata-agent
5 labels:
6 kubernetes.io/cluster-service: "true"
7 addonmanager.kubernetes.io/mode: Reconcile
8rules:
9- apiGroups:
10 - "*"
11 resources:
12 - "*"
13 verbs:
14 - watch
15 - get
16 - list
17---
18apiVersion: rbac.authorization.k8s.io/v1
19kind: ClusterRoleBinding
20metadata:
21 name: stackdriver:metadata-agent
22 labels:
23 kubernetes.io/cluster-service: "true"
24 addonmanager.kubernetes.io/mode: Reconcile
25roleRef:
26 apiGroup: rbac.authorization.k8s.io
27 kind: ClusterRole
28 name: stackdriver:metadata-agent
29subjects:
30- kind: ServiceAccount
31 name: metadata-agent
32 namespace: kube-system
View as plain text