diff --git a/k8s/service-account.yaml b/k8s/service-account.yaml index 3ac65c6..8f7bf4f 100644 --- a/k8s/service-account.yaml +++ b/k8s/service-account.yaml @@ -1,8 +1,10 @@ +# Service Accont apiVersion: v1 kind: ServiceAccount metadata: name: server-service-account --- +# Role apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: @@ -11,4 +13,19 @@ metadata: rules: - apiGroups: [""] # "" Indicates the Core API group resources: ["services"] # We are allowing Services - verbs: ["get", "watch", "list"] # We can do list operations on Services \ No newline at end of file + verbs: ["get", "watch", "list"] # We can do list operations on Services +--- +# Role Binding +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: service-reader-binding + namespace: server +subjects: +- kind: ServiceAccount + name: server-service-account # ServiceAccount name created above + namespace: server # ServiceAccount namespace +roleRef: + kind: Role + name: service-reader + apiGroup: rbac.authorization.k8s.io