Public-System-Design/haproxy-kubernetes
2
Fork 0
Code Issues Pull requests Projects Releases 4 Packages Wiki Activity Actions

Update haproxy-ingress-rbac.yaml
Some checks failed
Build Go Binary / build (push) Has been cancelled
Details

Browse source
This commit is contained in:
holzi1005 2025-06-29 17:30:27 +02:00
parent fd31ce7eed
commit 2e3bcfac2d
1 changed files with 6 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
haproxy-ingress-rbac.yaml
View file

@ -1,30 +1,27 @@
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
name: haproxy-sa name: gateway
namespace: kube-system namespace: kube-system
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: haproxy-ingress-reader name: gateway
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["endpoints", "services", "namespaces"] resources: ["endpoints", "services", "namespaces", "nodes"]
verbs: ["get", "list", "watch"]
- apiGroups: ["networking.k8s.io"]
resources: ["ingresses"]
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: haproxy-ingress-reader-binding name: gateway
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole
name: haproxy-ingress-reader name: gateway
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: haproxy-sa name: gateway
namespace: kube-system namespace: kube-system