diff --git a/charts/generic/container-kill/rbac_nginx.yaml b/charts/generic/container-kill/rbac_nginx.yaml new file mode 100644 index 0000000..f052ef5 --- /dev/null +++ b/charts/generic/container-kill/rbac_nginx.yaml @@ -0,0 +1,37 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: container-kill-sa + namespace: nginx + labels: + name: container-kill-sa +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: Role +metadata: + name: container-kill-sa + namespace: nginx + labels: + name: container-kill-sa +rules: +- apiGroups: ["","litmuschaos.io","batch","apps"] + resources: ["pods","jobs","daemonsets","pods/exec","chaosengines","chaosexperiments","chaosresults"] + verbs: ["create","list","get","patch","update","delete"] +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + name: container-kill-sa + namespace: nginx + labels: + name: container-kill-sa +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: container-kill-sa +subjects: +- kind: ServiceAccount + name: container-kill-sa + namespace: nginx +