github.com/jlmeeker/kismatic@v1.10.1-0.20180612190640-57f9005a1f1a/integration-tests/test-resources/rbac/pod-reader.yaml (about)

     1  ---
     2  kind: Role
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  metadata:
     5    namespace: default
     6    name: pod-reader
     7  rules:
     8  - apiGroups: [""] # "" indicates the core API group
     9    resources: ["pods"]
    10    verbs: ["get", "watch", "list"]
    11  ---
    12  kind: RoleBinding
    13  apiVersion: rbac.authorization.k8s.io/v1
    14  metadata:
    15    name: read-pods
    16    namespace: default
    17  subjects:
    18  - kind: User
    19    name: jane
    20    apiGroup: rbac.authorization.k8s.io
    21  roleRef:
    22    kind: Role
    23    name: pod-reader
    24    apiGroup: rbac.authorization.k8s.io