github-mirrors/gardener-extension-shoot-fleet-agent
1
0
Fork 0
mirror of https://github.com/ysoftdevs/gardener-extension-shoot-fleet-agent.git synced 2026-05-20 13:57:25 +02:00
Code Issues Packages Projects Releases 1 Wiki Activity

Add token requestor flow

Browse Source
This commit is contained in:
Martin Šalata
2022-06-07 12:57:34 +02:00
parent 3f865bb2fc
commit 99f210a8af
8 changed files with 403 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/internal/shoot-fleet-agent-shoot/templates/custom-infrastructure-rbac.yaml
+35
View File
@@ -0,0 +1,35 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: extensions.gardener.cloud:extension-shoot-fleet-agent:shoot
labels:
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
rules:
- apiGroups:
- '*'
resources:
- '*'
verbs:
- '*'
- nonResourceURLs:
- '*'
verbs:
- '*'
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: extensions.gardener.cloud:extension-shoot-fleet-agent:shoot
labels:
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: extensions.gardener.cloud:extension-shoot-fleet-agent:shoot
subjects:
- kind: ServiceAccount
name: {{ .Values.shootAccessServiceAccountName }}
namespace: {{ .Values.shootAccessServiceAccountNamespace }}