Files
litmus-hub/charts/spring-boot/spring-boot-cpu-stress/rbac.yaml
Shubham Chaudhary f41ae89302 chore(spring-boot): adding spring boot charts (#575)
* chore(spring-boot): adding spring boot charts

Signed-off-by: Shubham Chaudhary <shubham.chaudhary@harness.io>
2022-11-21 23:40:21 +05:30

62 lines
1.9 KiB
YAML

---
apiVersion: v1
kind: ServiceAccount
metadata:
name: spring-boot-cpu-stress-sa
namespace: default
labels:
name: spring-boot-cpu-stress-sa
app.kubernetes.io/part-of: litmus
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: spring-boot-cpu-stress-sa
namespace: default
labels:
name: spring-boot-cpu-stress-sa
app.kubernetes.io/part-of: litmus
rules:
# Create and monitor the experiment & helper pods
- apiGroups: [""]
resources: ["pods"]
verbs: ["create","delete","get","list","patch","update", "deletecollection"]
# Performs CRUD operations on the events inside chaosengine and chaosresult
- apiGroups: [""]
resources: ["events"]
verbs: ["create","get","list","patch","update"]
# Track and get the runner, experiment, and helper pods log
- apiGroups: [""]
resources: ["pods/log"]
verbs: ["get","list","watch"]
# for creating and managing to execute commands inside target container
- apiGroups: [""]
resources: ["pods/exec"]
verbs: ["get","list","create"]
# for configuring and monitor the experiment job by the chaos-runner pod
- apiGroups: ["batch"]
resources: ["jobs"]
verbs: ["create","list","get","delete","deletecollection"]
# for creation, status polling and deletion of litmus chaos resources used within a chaos workflow
- apiGroups: ["litmuschaos.io"]
resources: ["chaosengines","chaosexperiments","chaosresults"]
verbs: ["create","list","get","patch","update","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: spring-boot-cpu-stress-sa
namespace: default
labels:
name: spring-boot-cpu-stress-sa
app.kubernetes.io/part-of: litmus
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: spring-boot-cpu-stress-sa
subjects:
- kind: ServiceAccount
name: spring-boot-cpu-stress-sa
namespace: default