From 075c0af1eb197b37849f79579b3af328db4f116f Mon Sep 17 00:00:00 2001 From: UDIT GAURAV <35391335+uditgaurav@users.noreply.github.com> Date: Wed, 12 Feb 2020 16:35:09 +0530 Subject: [PATCH] (Adding rbac file in coredns experiments) (#138) Signed-off-by: Udit Gaurav --- charts/coredns/rbac.yaml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 charts/coredns/rbac.yaml diff --git a/charts/coredns/rbac.yaml b/charts/coredns/rbac.yaml new file mode 100644 index 0000000..19be64e --- /dev/null +++ b/charts/coredns/rbac.yaml @@ -0,0 +1,33 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: coredns-sa + namespace: kube-system + labels: + name: coredns-sa +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRole +metadata: + name: coredns-sa + labels: + name: coredns-sa +rules: +- apiGroups: ["","litmuschaos.io","batch"] + resources: ["services", "pods","jobs","chaosengines","chaosexperiments","chaosresults"] + verbs: ["create","list","get","patch","update","delete"] +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: coredns-sa + labels: + name: coredns-sa +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: coredns-sa +subjects: +- kind: ServiceAccount + name: coredns-sa + namespace: kube-system