github.com/1aal/kubeblocks@v0.0.0-20231107070852-e1c03e598921/deploy/csi-hostpath-driver/templates/rbac.yaml (about) 1 apiVersion: rbac.authorization.k8s.io/v1 2 kind: ClusterRoleBinding 3 metadata: 4 labels: 5 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 6 app.kubernetes.io/component: attacher-cluster-role 7 name: csi-hostpathplugin-attacher-cluster-role 8 roleRef: 9 apiGroup: rbac.authorization.k8s.io 10 kind: ClusterRole 11 name: external-attacher-runner-{{ include "csi-hostpath-driver.fullname" . }} 12 subjects: 13 - kind: ServiceAccount 14 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 15 namespace: {{ .Release.Namespace }} 16 --- 17 apiVersion: rbac.authorization.k8s.io/v1 18 kind: ClusterRoleBinding 19 metadata: 20 labels: 21 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 22 app.kubernetes.io/component: health-monitor-controller-cluster-role 23 name: csi-hostpathplugin-health-monitor-controller-cluster-role 24 roleRef: 25 apiGroup: rbac.authorization.k8s.io 26 kind: ClusterRole 27 name: external-health-monitor-runner-{{ include "csi-hostpath-driver.fullname" . }} 28 subjects: 29 - kind: ServiceAccount 30 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 31 namespace: {{ .Release.Namespace }} 32 --- 33 apiVersion: rbac.authorization.k8s.io/v1 34 kind: ClusterRoleBinding 35 metadata: 36 labels: 37 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 38 app.kubernetes.io/component: provisioner-cluster-role 39 name: csi-hostpathplugin-provisioner-cluster-role 40 roleRef: 41 apiGroup: rbac.authorization.k8s.io 42 kind: ClusterRole 43 name: external-provisioner-runner-{{ include "csi-hostpath-driver.fullname" . }} 44 subjects: 45 - kind: ServiceAccount 46 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 47 namespace: {{ .Release.Namespace }} 48 --- 49 apiVersion: rbac.authorization.k8s.io/v1 50 kind: ClusterRoleBinding 51 metadata: 52 labels: 53 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 54 app.kubernetes.io/component: resizer-cluster-role 55 name: csi-hostpathplugin-resizer-cluster-role 56 roleRef: 57 apiGroup: rbac.authorization.k8s.io 58 kind: ClusterRole 59 name: external-resizer-runner-{{ include "csi-hostpath-driver.fullname" . }} 60 subjects: 61 - kind: ServiceAccount 62 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 63 namespace: {{ .Release.Namespace }} 64 --- 65 apiVersion: rbac.authorization.k8s.io/v1 66 kind: ClusterRoleBinding 67 metadata: 68 labels: 69 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 70 app.kubernetes.io/component: snapshotter-cluster-role 71 name: csi-hostpathplugin-snapshotter-cluster-role 72 roleRef: 73 apiGroup: rbac.authorization.k8s.io 74 kind: ClusterRole 75 name: external-snapshotter-runner-{{ include "csi-hostpath-driver.fullname" . }} 76 subjects: 77 - kind: ServiceAccount 78 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 79 namespace: {{ .Release.Namespace }} 80 --- 81 apiVersion: rbac.authorization.k8s.io/v1 82 kind: RoleBinding 83 metadata: 84 labels: 85 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 86 app.kubernetes.io/component: attacher-role 87 name: csi-hostpathplugin-attacher-role 88 roleRef: 89 apiGroup: rbac.authorization.k8s.io 90 kind: Role 91 name: external-attacher-cfg-{{ include "csi-hostpath-driver.fullname" . }} 92 subjects: 93 - kind: ServiceAccount 94 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 95 namespace: {{ .Release.Namespace }} 96 --- 97 apiVersion: rbac.authorization.k8s.io/v1 98 kind: RoleBinding 99 metadata: 100 labels: 101 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 102 app.kubernetes.io/component: health-monitor-controller-role 103 name: csi-hostpathplugin-health-monitor-controller-role 104 roleRef: 105 apiGroup: rbac.authorization.k8s.io 106 kind: Role 107 name: external-health-monitor-cfg-{{ include "csi-hostpath-driver.fullname" . }} 108 subjects: 109 - kind: ServiceAccount 110 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 111 namespace: {{ .Release.Namespace }} 112 --- 113 apiVersion: rbac.authorization.k8s.io/v1 114 kind: RoleBinding 115 metadata: 116 labels: 117 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 118 app.kubernetes.io/component: provisioner-role 119 name: csi-hostpathplugin-provisioner-role 120 roleRef: 121 apiGroup: rbac.authorization.k8s.io 122 kind: Role 123 name: external-provisioner-cfg-{{ include "csi-hostpath-driver.fullname" . }} 124 subjects: 125 - kind: ServiceAccount 126 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 127 namespace: {{ .Release.Namespace }} 128 --- 129 apiVersion: rbac.authorization.k8s.io/v1 130 kind: RoleBinding 131 metadata: 132 labels: 133 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 134 app.kubernetes.io/component: resizer-role 135 name: csi-hostpathplugin-resizer-role 136 roleRef: 137 apiGroup: rbac.authorization.k8s.io 138 kind: Role 139 name: external-resizer-cfg-{{ include "csi-hostpath-driver.fullname" . }} 140 subjects: 141 - kind: ServiceAccount 142 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 143 namespace: {{ .Release.Namespace }} 144 --- 145 apiVersion: rbac.authorization.k8s.io/v1 146 kind: RoleBinding 147 metadata: 148 labels: 149 {{- include "csi-hostpath-driver.labels" . | nindent 4 }} 150 app.kubernetes.io/component: snapshotter-role 151 name: csi-hostpathplugin-snapshotter-role 152 roleRef: 153 apiGroup: rbac.authorization.k8s.io 154 kind: Role 155 name: external-snapshotter-leaderelection-{{ include "csi-hostpath-driver.fullname" . }} 156 subjects: 157 - kind: ServiceAccount 158 name: {{ include "csi-hostpath-driver.serviceAccountName" . }} 159 namespace: {{ .Release.Namespace }} 160 ---