c12s-kubespray/roles/network_plugin/canal/templates/canal-crb-calico.yml.j2

---
# Bind the calico ClusterRole to the canal ServiceAccount.
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: canal-calico
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: calico
subjects:
- kind: ServiceAccount
  name: canal
  namespace: kube-system
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 08:29:40 +00:00			`---`
			`# Bind the calico ClusterRole to the canal ServiceAccount.`
			`apiVersion: rbac.authorization.k8s.io/v1beta1`
			`kind: ClusterRoleBinding`
			`metadata:`
			`name: canal-calico`
			`roleRef:`
			`apiGroup: rbac.authorization.k8s.io`
			`kind: ClusterRole`
			`name: calico`
			`subjects:`
			`- kind: ServiceAccount`
			`name: canal`
Stop templating kube-system namespace and creating it (#2545) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it. 2018-03-30 11:29:13 +00:00			`namespace: kube-system`