diff --git a/charts/kube-components/k8-alb-ingress-controller/rbac.yaml b/charts/kube-components/k8-alb-ingress-controller/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-alb-ingress-controller/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default + diff --git a/charts/kube-components/k8-calico-node/rbac.yaml b/charts/kube-components/k8-calico-node/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-calico-node/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default + diff --git a/charts/kube-components/k8-kiam/rbac.yaml b/charts/kube-components/k8-kiam/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-kiam/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default + diff --git a/charts/kube-components/k8-kube-proxy/rbac.yaml b/charts/kube-components/k8-kube-proxy/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-kube-proxy/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default + diff --git a/charts/kube-components/k8-prometheus-k8s-prometheus/rbac.yaml b/charts/kube-components/k8-prometheus-k8s-prometheus/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-prometheus-k8s-prometheus/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default + diff --git a/charts/kube-components/k8-prometheus-operator/k8-prometheus-operarator.chartserviceversion.yaml b/charts/kube-components/k8-prometheus-operator/k8-prometheus-operator.chartserviceversion.yaml similarity index 100% rename from charts/kube-components/k8-prometheus-operator/k8-prometheus-operarator.chartserviceversion.yaml rename to charts/kube-components/k8-prometheus-operator/k8-prometheus-operator.chartserviceversion.yaml diff --git a/charts/kube-components/k8-prometheus-operator/rbac.yaml b/charts/kube-components/k8-prometheus-operator/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-prometheus-operator/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default + diff --git a/charts/kube-components/k8-prometheus-pushgateway/rbac.yaml b/charts/kube-components/k8-prometheus-pushgateway/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-prometheus-pushgateway/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default + diff --git a/charts/kube-components/k8-wavefront-collector/rbac.yaml b/charts/kube-components/k8-wavefront-collector/rbac.yaml new file mode 100644 index 0000000..a31c3c8 --- /dev/null +++ b/charts/kube-components/k8-wavefront-collector/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: ["","apps","batch"] + resources: ["jobs","deployments","daemonsets"] + verbs: ["create","list","get","patch","delete"] +- apiGroups: ["","litmuschaos.io"] + resources: ["pods","configmaps","events","services","chaosengines","chaosexperiments","chaosresults","deployments","jobs"] + verbs: ["get","create","update","patch","delete","list"] +- apiGroups: [""] + resources: ["nodes"] + verbs : ["get","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: k8-pod-delete-sa + namespace: default + labels: + name: k8-pod-delete-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: k8-pod-delete-sa +subjects: +- kind: ServiceAccount + name: k8-pod-delete-sa + namespace: default +