infra/clusters/aprs/ceph-csi/ceph-csi-rbac-fix.yaml

23 lines
No EOL
597 B
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: rbd-csi-provisioner-leader-election
namespace: ceph-csi
rules:
- apiGroups: ["coordination.k8s.io"]
resources: ["leases"]
verbs: ["get", "watch", "list", "delete", "update", "create"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: rbd-csi-provisioner-leader-election
namespace: ceph-csi
subjects:
- kind: ServiceAccount
name: rbd-csi-provisioner
namespace: ceph-csi
roleRef:
kind: Role
name: rbd-csi-provisioner-leader-election
apiGroup: rbac.authorization.k8s.io