45 lines
1 KiB
Plaintext
45 lines
1 KiB
Plaintext
|
{% if cilium_hubble_tls_generate %}
|
||
|
|
---
|
||
|
|
# Source: cilium/templates/hubble-generate-certs-clusterrolebinding.yaml
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
metadata:
|
||
|
|
name: hubble-generate-certs
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: hubble-generate-certs
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: hubble-generate-certs
|
||
|
|
namespace: kube-system
|
||
|
|
{% endif %}
|
||
|
|
---
|
||
|
|
# Source: cilium/templates/hubble-relay-clusterrolebinding.yaml
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
metadata:
|
||
|
|
name: hubble-relay
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: hubble-relay
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
namespace: kube-system
|
||
|
|
name: hubble-relay
|
||
|
|
---
|
||
|
|
# Source: cilium/templates/hubble-ui-clusterrolebinding.yaml
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
metadata:
|
||
|
|
name: hubble-ui
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: hubble-ui
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
namespace: kube-system
|
||
|
|
name: hubble-ui
|