move fluentd rbac to yakow
This commit is contained in:
parent
c1db6da4c1
commit
babc372d04
3 changed files with 0 additions and 24 deletions
|
@ -20,8 +20,6 @@
|
||||||
- {name: 'custom:system:kube-dns', file: 'custom:system:kube-dns-clusterrolebinding.yml', type: clusterrolebinding}
|
- {name: 'custom:system:kube-dns', file: 'custom:system:kube-dns-clusterrolebinding.yml', type: clusterrolebinding}
|
||||||
- {name: 'custom:system:node', file: 'custom:system:node-clusterrole.yml', type: clusterrole}
|
- {name: 'custom:system:node', file: 'custom:system:node-clusterrole.yml', type: clusterrole}
|
||||||
- {name: 'custom:system:node', file: 'custom:system:node-clusterrolebinding.yml', type: clusterrolebinding}
|
- {name: 'custom:system:node', file: 'custom:system:node-clusterrolebinding.yml', type: clusterrolebinding}
|
||||||
- {name: fluentd, file: fluentd-clusterrole.yml, type: clusterrole}
|
|
||||||
- {name: fluentd, file: fluentd-clusterrolebinding.yml, type: clusterrolebinding}
|
|
||||||
- {name: cluster-admin-local, file: cluster-admin-local-clusterrolebinding.yml, type: clusterrolebinding}
|
- {name: cluster-admin-local, file: cluster-admin-local-clusterrolebinding.yml, type: clusterrolebinding}
|
||||||
register: manifests
|
register: manifests
|
||||||
when: inventory_hostname == groups['kube-master'][0]
|
when: inventory_hostname == groups['kube-master'][0]
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: fluentd
|
|
||||||
rules:
|
|
||||||
- apiGroups: [""]
|
|
||||||
resources: ["pods"]
|
|
||||||
verbs: ["get"]
|
|
|
@ -1,13 +0,0 @@
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: fluentd
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: fluentd
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: fluentd
|
|
||||||
namespace: kube-system
|
|
Loading…
Reference in a new issue