mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
65 lines
1.4 KiB
YAML
65 lines
1.4 KiB
YAML
|
---
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
metadata:
|
||
|
|
name: kyverno:webhook
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: kyverno:webhook
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: kyverno-service-account
|
||
|
|
namespace: kyverno
|
||
|
|
---
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
metadata:
|
||
|
|
name: kyverno:userinfo
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: kyverno:userinfo
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: kyverno-service-account
|
||
|
|
namespace: kyverno
|
||
|
|
---
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
metadata:
|
||
|
|
name: kyverno:customresources
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: kyverno:customresources
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: kyverno-service-account
|
||
|
|
namespace: kyverno
|
||
|
|
---
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
metadata:
|
||
|
|
name: kyverno:policycontroller
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: kyverno:policycontroller
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: kyverno-service-account
|
||
|
|
namespace: kyverno
|
||
|
|
---
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
metadata:
|
||
|
|
name: kyverno:generatecontroller
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: kyverno:generatecontroller
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: kyverno-service-account
|
||
|
|
namespace: kyverno
|