diff --git a/haproxy-ingress-rbac.yaml b/haproxy-ingress-rbac.yaml index be6c706..0a692e0 100644 --- a/haproxy-ingress-rbac.yaml +++ b/haproxy-ingress-rbac.yaml @@ -1,30 +1,27 @@ apiVersion: v1 kind: ServiceAccount metadata: - name: haproxy-sa + name: gateway namespace: kube-system --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: haproxy-ingress-reader + name: gateway rules: - apiGroups: [""] - resources: ["endpoints", "services", "namespaces"] - verbs: ["get", "list", "watch"] -- apiGroups: ["networking.k8s.io"] - resources: ["ingresses"] + resources: ["endpoints", "services", "namespaces", "nodes"] verbs: ["get", "list", "watch"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: haproxy-ingress-reader-binding + name: gateway roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: haproxy-ingress-reader + name: gateway subjects: - kind: ServiceAccount - name: haproxy-sa + name: gateway namespace: kube-system