c12s-kubespray/roles/network_plugin/canal/templates/canal-crb-calico.yml.j2
Matthew Mosesohn c1fd468687 Add RBAC support for canal
Refactored how rbac_enabled is set
Added RBAC to ubuntu-canal-ha CI job
2017-09-01 10:45:37 +01:00

14 lines
330 B
Django/Jinja

---
# Bind the calico ClusterRole to the canal ServiceAccount.
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: canal-calico
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: calico
subjects:
- kind: ServiceAccount
name: canal
namespace: {{ system_namespace }}