diff --git a/charts/coredns/rbac.yaml b/charts/coredns/rbac.yaml new file mode 100644 index 0000000..19be64e --- /dev/null +++ b/charts/coredns/rbac.yaml @@ -0,0 +1,33 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: coredns-sa + namespace: kube-system + labels: + name: coredns-sa +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRole +metadata: + name: coredns-sa + labels: + name: coredns-sa +rules: +- apiGroups: ["","litmuschaos.io","batch"] + resources: ["services", "pods","jobs","chaosengines","chaosexperiments","chaosresults"] + verbs: ["create","list","get","patch","update","delete"] +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: coredns-sa + labels: + name: coredns-sa +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: coredns-sa +subjects: +- kind: ServiceAccount + name: coredns-sa + namespace: kube-system