Please add k8s clusterRole and clusterRoleBinding to README #2

New issue

Open

opened 2021-11-23 06:41:57 -08:00 by Ghost · 0 comments

Ghost commented

2021-11-23 06:41:57 -08:00

(Migrated from codeberg.org)

I've created a new readonly role:

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: kube-reader-cluster-role
rules:
- apiGroups: [""]
  resources: ["pods","configmaps","services","events","namespaces","nodes","limitranges","persistentvolumes","persistenttvolumeclaims","resourcequotas"]
  verbs: ["get", "watch", "list"]
- apiGroups:
    - apps
  resources: ["*"]
  verbs:
    - get
    - list
    - watch

and binded it to the zabbix SA:
create clusterrolebinding kube-support-kube-reader --clusterrole=kube-reader-cluster-role --serviceaccount=kube-system:zbx

I've created a new readonly role: ``` apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kube-reader-cluster-role rules: - apiGroups: [""] resources: ["pods","configmaps","services","events","namespaces","nodes","limitranges","persistentvolumes","persistenttvolumeclaims","resourcequotas"] verbs: ["get", "watch", "list"] - apiGroups: - apps resources: ["*"] verbs: - get - list - watch ``` and binded it to the zabbix SA: ` create clusterrolebinding kube-support-kube-reader --clusterrole=kube-reader-cluster-role --serviceaccount=kube-system:zbx`